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SYMANTEC SOFTWARE LICENSE AGREEMENT 
Norton Antivirus 



IMPORTANT: PLEASE READ THE TERMS AND 
CONDITIONS OF THIS LICENSE AGREEMENT 
CAREEULLY BEFORE USING THE SOFTWARE. 
SYMANTEC CORPORATION AND/OR ITS 
SUBSIDIARIES ("SYMANTEC") IS WILLING TO 
LICENSE TFIE SOFTWARE TO YOU AS THE 
INDIVIDUAL, THE COMPANY, OR THE LEGAL 
ENTITY THAT WILL BE UTILIZING THE 
SOFTWARE (REFERENCED BELOW AS "YOU" 
OR "YOUR") ONLY ON THE CONDITION THAT 
YOU ACCEPT ALL OF THE TERMS OF THIS 
LICENSE AGREEMENT. THIS IS A LEGAL AND 
ENFORCEABLE CONTRACT BETWEEN YOU 
AND SYMANTEC. BY OPENING THIS 
PACKAGE, BREAKING THE SEAL, CLICKING 
THE "ACCEPT" OR "YES" BUTTON OR 
OTHERWISE INDICATING ASSENT 
ELECTRONICALLY, OR LOADING THE 
SOFTWARE, YOU AGREE TO THE TERMS AND 
CONDITIONS OF THIS AGREEMENT. IF YOU 
DO NOT AGREE TO THESE TERMS AND 
CONDITIONS, CLICK THE "I DO NOT ACCEPT- 
OR "NO" BUTTON OR OTHERWISE INDICATE 
REFUSAL, MAKE NO FURTHER USE OF THE 
SOFTWARE AND CONTACT SYMANTEC 
CUSTOMER SERVICE FOR INFORMATION ON 
HOW TO OBTAIN A REFUND OF THE MONEY 
YOU PAID FOR THE SOFTWARE (LESS 
SHIPPING, HANDLING, AND ANY 
APPLICABLE TAXES) AT ANY TIME DURING 
THE SIXTY (60) DAY PERIOD FOLLOWING THE 
DATE OF PURCHASE. 

i. License: 

The software and documentation that 
accompanies this license (collectively the 
"Software") is the property of Symantec, or its 
licensors, and is protected by copyright law. 
While Symantec continues to own the Software, 
You will have certain rights to use the Software 
after Your acceptance of this license. This 
license governs any releases, revisions, or 
enhancements to the Software that Symantec 
may furnish to You. Except as may be modified 
by a Symantec license certificate, license 
coupon, or license key (each a "License 
Module") that accompanies, precedes, or 
follows this license, Your rights and obligations 
with respect to the use of this Software are as 
follows. 

You may: 

A. use one copy of the Software on a single 
computer. If a License Module accompanies, 
precedes, or follows this license, You may make 
the number of copies of the Software licensed to 
You by Symantec as provided in Your License 
Module. Your License Module shall constitute 
proof of Your right to make such copies; 

B. make one copy of the Software for archival 
purposes, or copy the Software onto the hard 
disk of Your computer and retain the original 
for archival purposes; 

C. use the Software on a network, provided that 
You have a licensed copy of the Software for 



each computer that can access the Software 
over that network; 

D. after written notice to Symantec, transfer the 
Software on a permanent basis to another 
person or entity, provided that You retain no 
copies of the Software and the transferee agrees 
to the terms of this license; and 

E. use the Software in accordance with any 
additional permitted uses set forth, below. 

You may not: 

A. copy the printed documentation that 
accompanies the Software; 

B. sublicense, rent, or lease any portion of the 
Software; reverse engineer, decompile, 
disassemble, modify, translate, make any 
attempt to discover the source code of the 
Software, or create derivative works from the 
Software; 

C. use the Software as part of a facility 
management, timesharing, service provider, or 
service bureau arrangement; 

D. use a previous version or copy of the 
Software after You have received a disk 
replacement set or an upgraded version. Upon 
upgrading the Software, all copies of the prior 
version must be destroyed; 

E. use a later version of the Software than is 
provided herewith unless You have purchased 
upgrade insurance or have otherwise 
separately acquired the right to use such later 
version; 

F. use, if You received the software distributed 
on media containing multiple Symantec 
products, any Symantec software on the media 
for which You have not received a permission 
in a License Module; 

G. use the Software in any manner not 
authorized by this license; nor 

H. use the Software in any manner that 
contradicts any additional restrictions set forth, 
below. 

2. Content Updates: 

Certain Software utilize content that is updated 
from time to time (including but not limited to 
the following Software: antivirus software 
utilize updated virus definitions; content 
filtering software utilize updated URL lists; 
some firewall software utilize updated firewall 
rules; and vulnerability assessment products 
utilize updated vulnerability data; these 
updates are collectively referred to as "Content 
Updates"). You shall have the right to obtain 
Content Updates for any period for which You 
have purchased maintenance, except for those 
Content Updates that Symantec elects to make 
available by separate paid subscription, or for 
any period for which You have otherwise 
separately acquired the right to obtain Content 
Updates. Symantec reserves the right to 
designate specified Content Updates as 
requiring purchase of a separate subscription at 
any time and without notice to You; provided, 



however, that if You purchase maintenance 
hereunder that includes particular Content 
Updates on the date of purchase, You will not 
have to pay an additional fee to continue 
receiving such Content Updates through the 
term of such maintenance even if Symantec 
designates such Content Updates as requiring 
separate purchase. This License does not 
otherwise permit Licensee to obtain and use 
Content Updates. 

3. Product Installation and 
Required Activation: 

There are technological measures in this 
Software that are designed to prevent 
unlicensed or illegal use of the Software. You 
agree that Symantec may use these measures 
to protect Symantec against software piracy. 
This Software may contain enforcement 
technology that limits the ability to install and 
uninstall the Software on a machine to not more 
than a finite number of times for a finite 
number of machines. This License and the 
Software containing enforcement technology 
require activation as further set forth during 
installation and in the Documentation. The 
Software will only operate for a finite period of 
time prior to Software activation by You. During 
activation, You will provide Your unique 
product key accompanying the Software and PC 
configuration in the form of an alphanumeric 
code over the Internet to verify the authenticity 
of the Software. If You do not complete the 
activation within the finite period of time set 
forth in the Documentation, or as prompted by 
the Software, the Software will cease to function 
until activation is complete, which will restore 
Software functionality. In the event You are not 
able to activate the Software over the Internet, 
or through any other method specified during 
the activation process, You may contact 
Symantec Customer Support using the 
information provided by Symantec during 
activation, or as may be set forth in the 
Documentation. 

k- Sixty (60) Day Money Back 
Guarantee: 

If You are the original licensee of this copy of 
the Software and are not completely satisfied 
with it for any reason, please contact Symantec 
Customer Service for a refund of the money You 
paid for the Software (less shipping, handling, 
and any applicable taxes) at any time during 
the sixty (60) day period following the date of 
purchase. 

5. Limited Warranty: 

Symantec warrants that the media on which the 
Software is distributed will be free from defects 
for a period of sixty (60) days from the date of 
delivery of the Software to You. Your sole 
remedy in the event of a breach of this warranty 
will be that Symantec will, at its option, replace 
any defective media returned to Symantec 
within the warranty period or refund the money 
You paid for the Software. Symantec does not 
warrant that the Software will meet Your 
requirements or that operation of the Software 



will be uninterrupted or that the Software will 
be error-free. 

TO THE MAXIMUM EXTENT PERMITTED BY 
APPLICABLE LAW, THE ABOVE WARRANTY IS 
EXCLUSIVE AND IN LIEU OF ALL OTHER 
WARRANTIES, WHETHER EXPRESS OR 
IMPLIED, INCLUDING THE IMPLIED 
WARRANTIES OF MERCHANTABILITY, 
FITNESS FOR A PARTICULAR PURPOSE, AND 
NONINFRINGEMENT OF INTELLECTUAL 
PROPERTY RIGHTS. THIS WARRANTY GIVES 
YOU SPECIFIC LEGAL RIGHTS. YOU MAY 
HAVE OTHER RIGHTS, WHICH VARY FROM 
STATE TO STATE AND COUNTRY TO 
COUNTRY. 

6. Disclaimer of Damages: 

SOME STATES AND COUNTRIES, INCLUDING 
MEMBER COUNTRIES OF THE EUROPEAN 
ECONOMIC AREA, DO NOT ALLOW THE 
LIMITATION OR EXCLUSION OF LIABILITY 
FOR INCIDENTAL OR CONSEQUENTIAL 
DAMAGES, SO THE BELOW LIMITATION OR 
EXCLUSION MAY NOT APPLY TO YOU. TO THE 
MAXIMUM EXTENT PERMITTED BY 
APPLICABLE LAW AND REGARDLESS OF 
WHETHER ANY REMEDY SET FORTH HEREIN 
FAILS OF ITS ESSENTIAL PURPOSE, IN NO 
EVENT WILL SYMANTEC OR ITS LICENSORS 
BE LIABLE TO YOU FOR ANY SPECIAL, 
CONSEQUENTIAL, INDIRECT, OR SIMILAR 
DAMAGES, INCLUDING ANY LOST PROFITS 
OR LOST DATA ARISING OUT OF THE USE OR 
INABILITY TO USE THE SOFTWARE EVEN IF 
SYMANTEC HAS BEEN ADVISED OF THE 
POSSIBILITY OF SUCH DAMAGES. IN NO 
CASE SHALL SYMANTEC'S OR ITS 
LICENSORS' LIABILITY EXCEED THE 
PURCHASE PRICE FOR THE SOFTWARE. The 
disclaimers and limitations set forth above will 
apply regardless of whether You accept the 
Software. 

7. U.S. Government Restricted 
Rights: 

RESTRICTED RIGHTS LEGEND. All Symantec 
products and documentation are commercial in 
nature. The software and software 
documentation are "Commercial Items," as that 
term is defined in 48 C.F.R. section 2.101, 
consisting of "Commercial Computer Software" 
and "Commercial Computer Software 
Documentation," as such terms are defined in 
48 C.F.R. section 252.227-7014(a)(5) and 48 
C.F.R. section 252.227-7014(a)(l), and used in 
48 C.F.R. section 12.212 and 48 C.F.R. section 
227.7202, as applicable. Consistent with 48 
C.F.R. section 12.212, 48 C.F.R. section 
252.227-7015, 48 C.F.R. section 227.7202 
through 227.7202-4, 48 C.F.R. section 52.227- 
14, and other relevant sections of the Code of 
Federal Regulations, as applicable, Symantec's 
computer software and computer software 
documentation are licensed to United States 
Government end users with only those rights as 
granted to all other end users, according to the 
terms and conditions contained in this license 
agreement. Manufacturer is Symantec 
Corporation, 20330 Stevens Creek Blvd., 
Cupertino, CA 95014. 



8. Export Regulation: 

The Software and its related documentation, 
including technical data, may not be exported 
or re-exported in violation of the U.S. Export 
Administration Act, its implementing laws and 
regulations, the laws and regulations of other 
U.S. agencies, or the export and import laws of 
the jurisdiction in which the Software was 
obtained. Export to any individual, entity, or 
country specifically designated by applicable 
law is strictly prohibited. 

9. General: 

If You are located in North America or Latin 
America, this Agreement will be governed by 
the laws of the State of California, United States 
of America. Otherwise, this Agreement will be 
governed by the laws of England and Wales. 
This Agreement and any related License 
Module is the entire agreement between You 
and Symantec relating to the Software and: (i) 
supersedes all prior or contemporaneous oral or 
written communications, proposals, and 
representations with respect to its subject 
matter; and (ii) prevails over any conflicting or 
additional terms of any quote, order, 
acknowledgment, or similar communications 
between the parties. This Agreement shall 
terminate upon Your breach of any term 
contained herein and You shall cease use of and 
destroy all copies of the Software. The 
disclaimers of warranties and damages and 
limitations on liability shall survive 
termination. Software and documentation is 
delivered Ex Works California, U.S.A. or Dublin, 
Ireland respectively (ICC INCOTERMS 2000). 
This Agreement may only be modified by a 
License Module that accompanies this license 
or by a written document that has been signed 
by both You and Symantec. Should You have 
any questions concerning this Agreement, or if 
You desire to contact Symantec for any reason, 
please write to: (i) Symantec Customer Service, 
555 International Way, Springfield, OR 97477, 
U.S.A., (ii) Symantec Authorized Service 
Center, Postbus 1029, 3600 BA Maarssen, The 
Netherlands, or (iii) Symantec Customer 
Service, 1 Julius Ave, North Ryde, NSW 2113, 
Australia. 
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Responding to 
emergencies 



If you have an emergency, read these sections to try to 
find the solution to your problem. 

Common problems include: 
ss Virus threats 

ss Trouble restarting your computer 
ss Lost or missing files 
ss Possible disk damage 

(!) If you purchased this product to address any of the 
problems listed above, read these sections first. 
Immediate installation of the product may not always 
provide the best solution to your problem. 
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If your product won't install 

(!) You must be running Windows in order to install your 
Symantec product. 

If you try to install and your computer has a virus and 
you choose not to run the Symantec Pre-Install Scanner, 
start over and run the Symantec Pre-Install Scanner as 
directed. 

If you can't run the Symantec Pre-Install Scanner, but 
you can connect to the Internet, go to 
http://security.symantec.com and run virus detection 
from the Symantec Security Check Web site. 

See "If your If you can't start your computer, you need to start from 

computer won't an uninfected disk and scan for viruses. 



start" on page 13. 



Once the virus has been repaired, delete the installation 
files that were left behind in the temporary folder after 
you tried to install the first time. 

To delete remaining installation files 

1 On the Windows taskbar, click Start > Run. 

2 In the Run dialog box, type %TEMP% 

3 Click OK. 

4. In the Temp window, select all of the files. 

5 Click Delete. 

6 Close the window. 

7 After you delete the temporary files, begin installation 
again and run the Symantec Pre-Install Scanner to be 
sure that you have removed all of the viruses. 
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If your computer won't start 

If you have a virus or threat on your computer, you need 
to start the computer from an uninfected disk to remove 
the virus. 



Suggestion 


For more information 


Restart from the CD and scan your 
computer's hard disk for viruses. 


See "Scan for viruses using the 
CD" on page 13. 


If you have access to another computer, 
create a set of Emergency Disks and start 
your computer from the Emergency Disks. 


See "Create Emergency Disks" on 
page 14. 

See "If you need to use 
Emergency Disks" on page 15. 


Start your computer by using your Rescue 
Disks if you created them. 
({) Rescue Disks are available only for 
Windows 98/Me. 


See "Create and use Rescue 
Disks" on page «• 



Scan for viruses using the CD 

(!) You might need to change your computer's BIOS Setup 
options to start from the CD-ROM drive. To do so, see the 
documentation that came with your computer. 

To start from the CD and scan for viruses 

1 Insert the CD into the CD-ROM drive. 

2 Restart your computer. 

Your computer displays the following information: 
■■ 1 Boot from Hard Drive 
•: 2 Boot from CD-ROM 

3 Click 2 Boot from CD-ROM to restart from the CD. 
After the computer restarts, the Emergency program 
automatically begins to scan for and remove viruses. 

4 When Norton Antivirus has finished scanning, 
remove the CD from your CD-ROM drive. 
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Create Emergency Disks 

Emergency Disks are used to start your computer in case 
of a problem. If your computer can start from a CD, you 
can use the product CD in place of Emergency Disks and 
do not need to create them. 

If you downloaded the software or do not have a CD, the 
program for creating Emergency Disks (NED.exe) is 
included in the download. Navigate to the location to 
which you downloaded the software and begin with step 
3 of these instructions. 

If you cannot start your computer from a CD, you can use 
these instructions to create Emergency Disks on another 
computer or go to 

http://www.symantec.com/techsupp/ebd.html and 
download the Emergency Disk program. Follow the 
instructions included in the download to create the 
Emergency Disks. 

You will need several formatted 1 .44-MB disks. 

To create Emergency Disks from the CD 

1 Insert the CD into the CD-ROM drive. 

2 Click Browse CD. 

3 Double-click the Support folder. 
h Double-click the Edisk folder. 

5 Double-click NED.exe. 

6 In the welcome window, click OK. 

7 Label the first disk as instructed and insert it into 
drive A. 

8 Click Yes. 

9 Repeat steps 7 and 8 for the subsequent disks. 

10 When the procedure is complete, click OK. 

11 Remove the final disk from drive A and store the 
Emergency Disk set in a safe place. 



See "If you need to 
use Emergency 
Disks" on page 15. 



0) 
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If you need to use Emergency Disks 

See "Create If you have not created Rescue Disks, you can use 

Emergency Disks" Emergency Disks to restart your computer and scan for 
on Daee izt. 

K B * viruses. 

To use Emergency Disks 

1 Insert Emergency Disk 1 into drive A and restart your 
computer. 

The Emergency program runs in DOS. 

2 Ensure that Antivirus is selected, then press Enter. 

3 Follow the on-screen instructions for inserting and 
removing the Emergency Disks. 

The Emergency program automatically scans your 
computer and removes viruses. 
it When the Emergency program is done, remove the 
Emergency Disk from drive A and restart your 
computer. 
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How to maintain protection 

When Norton Antivirus is installed, you have complete 
virus protection. However, new viruses and threats are 
created constantly. Viruses can spread when you start 
your computer from an infected disk or when you run an 
infected program. There are several things that you can 
do to avoid viruses and to recover quickly should a virus 
strike. 



Avoid viruses and threats 



See "Explore the 
Symantec service 
and support Web 
site" on page 95. 



See "Keeping 
current with 
LiveUpdate" on 
page 67. 



See "Manually scan 
disks, folders, and 
files" on page 76. 

See "Schedule 
scans" on page 81. 



See "Ensure that 
protection settings 
are enabled" on 
page 75- 



It is important that you practice regular file maintenance 
and that you keep Norton Antivirus up-to-date. 

To avoid viruses: 

ss Write-protect removable media. 

ss Stay informed about viruses by logging on to the 
Symantec Security Response Web site 
(http://securityresponse.symantec.com) where there 
is extensive, frequently updated information on 
viruses and automatic virus protection. 

ss Keep LiveUpdate turned on at all times to continually 

update your virus definitions files, 
ss Run LiveUpdate regularly to receive new program 

updates. 

ss Keep Auto-Protect turned on at all times to prevent 
viruses from infecting your computer. 

ss If Auto-Protect is not turned on, scan removable 
media before you use them. 

ss Schedule periodic scans to occur automatically, 
ss Watch for email messages from unknown senders. Do 
not open anonymous attachments. 

ss Keep email protection turned on to avoid sending or 

receiving infected email attachments, 
ss Keep all recommended maximum protection settings 

turned on. 
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Prepare for emergencies 

It is also important that you are prepared in case your 
computer is infected by a virus. 

To prepare for emergencies: 

ss Back up files regularly and keep more than just the 
most recent backup. 

■■ If you are using a computer that cannot start from a 
CD, create a set of Emergency Disks, from which you 
can start your computer and scan for viruses. 

!! If you are using Windows 98/Me, create a set of 
Rescue Disks and keep them updated. You can use 
them to start your computer in DOS mode and use 
Norton Antivirus to fix virus-related problems and 
recover from a system crash. 



See "Create 
Emergency Disks" 
on page lit. 

See "Create and 
use Rescue Disks" 
on page «. 
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Use the information in this section to familiarize yourself 
with the product. 

This section includes: 

« A list of all of the features in the product 
■■ A brief description of each feature 

The feature summary can help you determine which 
feature to use to solve a problem. Read the feature 
descriptions to locate the correct component to use. 
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Activation protects you 

Product activation is a technology that protects users 
from pirated or counterfeit software by limiting use of a 
product to those users who have acquired the product 
legitimately. Product activation requires a unique 
product key for each installation of a product. You must 
activate the product within 1 5 days of installing it. 

Product activation is completely separate from 
registration. Your activation information and registration 
information reside on separate servers, with no link 
between the different sets of data. 

When to activate your product 

During installation, you are asked to enter a product key. 
After you have installed the product, activate it by 
sending the product key to the Symantec servers. 

You can activate your product by clicking Activate Now 
in the Activation Wizard that runs immediately after 
installation. If you choose not to activate at that time, you 
will receive alerts that will remind you to activate the 
product. You can click Activate Now in the alerts to 
activate the product. Activation should take just a few 
minutes. 

(!) If you do not activate the product within 1 5 days of 
installing it, the product will stop working. You can 
activate it after the 1 5 days have elapsed, but you will not 
be protected until you do. 

Locate the product key 

The product key can most frequently be found on a 
sticker on your CD sleeve. If it is not there, then it will be 
on an insert in your product package. If you have 
purchased the product on DVD, look for the sticker on 
your DVD package. If you have downloaded the product 
from the Symantec Store, the product key is stored on 
your computer as part of the download process. 
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Virus and threat protection features 

Norton Antivirus provides comprehensive virus 
prevention, threat detection, and repair software for your 
computer. It automatically detects and repairs known 
viruses. Norton Antivirus detects viruses and other 
potential risks in instant messenger attachments as well 
as in email messages, Internet downloads, and other 
files. Easy updating of the virus definitions over the 
Internet keeps Norton Antivirus prepared for the latest 
threats. 

Norton Antivirus now includes expanded threat 
detection of both known and emerging threats, such as 
spyware and other files that could put your computer at 
risk. Norton Antivirus also scans files inside of 
compressed files. 

As always, Norton Antivirus features continually 
monitor your computer and protect it from known and 
unknown threats. 



Feature 


Description 


Auto-Protect 


■■ Loads into memory when Windows starts, providing 
constant protection while you work. 

■■ Checks for viruses every time that you use software 
programs on your computer, insert floppy disks or 
other removable media, access the Internet, or use 
document files that you receive or create. 

!! Monitors your computer for any unusual symptoms 
that may indicate an active threat. 

See "What to do if a virus is found" on page 85. 


Virus protection 
updates 


Updates your virus definitions automatically. 
See "About protection updates" on page 68. 


Compressed file 
protection 


Detects and repairs viruses inside of compressed files. 
See "What to do if a virus is found" on page 85. 
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Feature 


Description 


Email protection 


Protects incoming and outgoing email messages, preventing 
your computer and other computers from infection. 

See "What to do if a virus is found" on page 85. 


Instant messenger 
protection 


Scans for and detects viruses in instant messenger 
attachments. 

See "What to do if a virus is found" on page 85. 


Bloodhound 
technology 


Detects new and unknown viruses by analyzing an 
executable file's structure, behavior, and other attributes 
such as programming logic, computer instructions, and 
any data that is contained in the file. 

See "What to do if a virus is found" on page 85. 


Password 
protection 


Protects Norton Antivirus options from unauthorized 
changes. 

See "Password protect Norton Antivirus options" on page 65. 



Installing Norton 
Antivirus 



Before installing Norton Antivirus, take a moment to 
review the system requirements that are listed in this 
chapter. Windows 98/Me users should have several 
blank 1.44-MB disks available to make Rescue Disks. 

System requirements 

To use Norton Antivirus, your computer must have one 
of the following Windows operating systems: 

:: Windows 98/98SE/Me 

ss Windows 2000 Professional 

ss Windows XP Professional/Home Edition 

Installation of Norton Antivirus is not supported on 
Windows 95/NT 4.0, Macintosh, Linux, or server 
versions of Windows 2000/XP computers. 

(!) If you are planning to upgrade your Windows operating 
system from Windows 98/Me to Windows 2000/XP, you 
must uninstall Norton Antivirus first and then reinstall 
after the upgrade is complete. 
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Your computer must also meet the following minimum 
requirements. 



Operating system 


Requirements 


Windows 98/98SE/ 
Me 




s 133-MHz processor for Windows 98; 150-MHz 
processor for Windows Me 

: 32 MB of RAM 

■ 125 MB of available hard disk space 
: CD-ROM or DVD-ROM drive 

■ Internet Explorer 5.1 with Service Pack 2 or later (5.5 
recommended) 


Windows 2000 

Professional 

Edition 




■ 133-MHz or higher processor 
: 6k MB of RAM 

■ 85 MB of available hard disk space 
: CD-ROM or DVD-ROM drive 

■ Internet Explorer 5.1 with Service Pack 2 or later (5.5 
recommended) 


Windows XP 
Professional/Home 
Edition Service 
Packi 

Windows XP Tablet 
PC and Media 
Center Editions 




! 300-MHz or higher processor 
: 128 MB of RAM 

! 85 MB of available hard disk space 
: CD-ROM or DVD-ROM drive 

! Internet Explorer 5.1 with Service Pack 2 or later (5.5 
recommended) 



(!) If you are installing on Windows 2000/XP, you must 
install with administrator privileges. 



Supported email clients 

Email scanning is supported for any POP3-compatible 
and SMTP-compatible email client including: 

!■ Microsoft Outlook Express version 4, 5, or 6 
» Microsoft Outlook 97/98/2000/XP 
■ Netscape Messenger version 4, Netscape Mail 
version 6 
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Eudora Light version 3, Eudora Pro version 4, Eudora 
version 5 
Pegasus 4 



Unsupported email programs 



Norton Antivirus does not support the following email 
clients: 

:: IMAP 
:: AOL 

ss POP3s with Secure Sockets Layer (SSL) 

See the online Help for more information about 
Secure Sockets Layer connections. 

■■ Web-based email such as Hotmail and Yahoo! 

ss Lotus Notes 

About encrypted email connections 

Norton Antivirus does not support email connections 
using Secure Sockets Layer (SSL). SSL is a Netscape 
protocol designed to provide secure communications on 
the Internet. If you use an SSL connection, you are not 
protected by Norton Antivirus. 

To send email messages through SSL connections, 
disable incoming and outgoing email protection in 
Norton Antivirus. 

To send email through an SSL connection 

1 In the main window, click Options. 

If a menu appears, click Norton Antivirus. 

(!) If you set a password for Options, Norton Antivirus 

asks you for the password before you can continue. 

2 In the Options window, click Email. 

3 Click OK. 

if Uncheck Scan incoming Email (recommended). 

5 Uncheck Scan outgoing Email (recommended). 

6 Resend your email. 
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Supported instant messenger clients 

The following instant messenger clients are supported: 
ss AOL Instant Messenger, version 4.7 or later 
B Yahoo! Messenger, version 5.0 or later 
ss MSN Messenger, versions 4.6 and 4.7 
■ Windows Messenger, version 4.6 or later for 
Windows XP 

Prepare your computer 

Before you install Norton Antivirus, prepare your 
computer. If your computer cannot start from a CD, 
create Emergency Disks. 

If you have an earlier version of Norton Antivirus, the 
new version automatically removes the earlier version. If 
your version is earlier than 2002, you must uninstall it 
before installing the new version. If you have Norton 
Antivirus 2002, you can transfer your existing option 
settings to the new version of the program. 

Before you install Norton Antivirus, use these 
suggestions to prepare your computer: 
ss If you have any other antivirus programs on your 
computer, you must uninstall them and restart your 
computer before installing Norton Antivirus. 
To uninstall other antivirus programs, see the user 
documentation that came with each program, 
ss Close all other Windows programs before installing 
Norton Antivirus, including those programs 
displayed in the Windows system tray. 

Install Norton Antivirus 

Install Norton Antivirus from the CD or if you 
downloaded your copy of the product, follow the 
instructions on the Web page. 

If you have not already done so, close all other Windows 
programs. 



See "Create 
Emergency Disks" 
on page lit. 

See "If you need to 
uninstall Norton 
Antivirus" on 
page 36. 
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To install Norton Antivirus from the CD 

1 Insert the CD into the CD-ROM drive. 

(!) If your computer is not set to automatically open a CD, 

you will have to open it yourself. 

2 In the Norton Antivirus window, click Install Norton 
Antivirus. 

3 In the Scan for Viruses dialog box, click Yes to scan 
your computer before installing Norton Antivirus. 



\ Symantec Pre- Install Scanner 
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In the Symantec Pre-lnstall Scanner window, review 
the progress of the scan. 

If Norton Antivirus detects a virus, it prompts you to 
delete each file individually. 
Click Delete for each file that you want to delete. 
After the scan completes, view the results in the 
scanresults -Notepad window, then exit Notepad. 
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7 In the Norton Antivirus 2004 Setup window, click 
Next to continue with the installation. 



Norton Antivirus 7004 Setup 



License Aorcemcrrt 



Symantec Software license agreement 

Norton Anciviru* 

IMPORTANT : PLEASE READ THE TERMS AND CONDITIONS OP THIS 
LICENSE AGREEMENT CAREFULLY BEFORE USING THE SOFTWARE. 
SYMANTEC CORPORATION AND/OR ITS SUBSIDIARIES { ■ SYMANTEC" ) 
IS WILLING TO LICENSE THE SOFTWARE TO YOU AS THE 
INDIVIDUAL, THE COMPANY, OR THE LEGAL ENTITY THAT WILL 
BE UTILIZING THE SOFTWARE I REFERENCED BELOW AS "YOU" OR 
■YOUR-) ONLY ON THE CONDITION THAT YOU ACCEPT ALL OF THE 
TEPHS OF THIS LICENSE AGREEMENT, THIS IS A LEGAL AND 
ENFORCEABLE CONTRACT BETWEEN YOU AND SYMANTEC. BY 
OPENING THIS PACKAGE, BREAKING THE SEAL, CLICKING THE 
■ACCEPT" OR "YES- BUTTON OR OTHERWISE INDICATING ASSENT 
ELECTRONICALLY. OR LOADING THE SOFTWARE, YOU AGREE TO 
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8 Read the License Agreement, then click I accept the 
license agreement. 

If you decline, you cannot continue with the 
installation. 
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9 Click Next. 
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See "Activation 
protects you" on 
page 20. 



10 In the Activation window, type the product key for 
activation, then click Next. 
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11 Select a folder into which you want to install Norton 
Antivirus, then click Next. 



[ll Norton Antivirus ?0Q4 Setup 
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12 If you are upgrading from Norton Antivirus 2002 or 
2003, you can keep your option settings. Click Yes to 
keep your option settings, then click Next. 
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13 If you have Norton Antivirus 2001 or 2002 

Professional Edition installed on your computer, you 
can keep the Symantec Antivirus for Palm OS 
component installed. Click Yes to keep the 
component installed, then click Next. 
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it. Confirm the installation location, then click Next. 
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See "Read the 15 After Norton Antivirus is installed, scroll through the 

Readme file" on Readme text, then click Next, 

page 35. 
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16 Click Finish to complete the installation. 

(!) After installation, you must restart your computer for all 
Norton Antivirus options to be enabled. 

After installation 

For Windows 98/Me, you must restart your computer 
after installing Norton Antivirus. 

If your computer needs to be restarted after Norton 
Antivirus is installed, a prompt appears giving you the 
option to do so immediately. After restarting or if your 
computer does not need to be restarted, the Information 
Wizard appears. 

(!) If you bought your computer with Norton Antivirus 
already installed, the Information Wizard appears the 
first time that you start Norton Antivirus. You must 
accept the license agreement that appears in the 
Information Wizard to activate Norton Antivirus. 
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Use the Information Wizard 

The Information Wizard lets you activate your copy of 
Norton Antivirus, get information about your Norton 
Antivirus subscription, select post-installation tasks to 
be done automatically, and review your Norton Antivirus 
settings. 

(!) If you choose not to register the software using the 
Information Wizard or if registration fails for some 
reason, you can register by using the Product 
Registration option on the Help menu or by using the 
Symantec Web site at www.symantec.com. On the Web 
site, go to the Products page for the registration link. 

To use the Information Wizard 

1 In the welcome window, click Next. 

(!) You must activate the software within 1 5 days. 

2 On the Product Activation window, click Activate 
and register your product now. 

3 Click Next. 

4 Make sure that your computer is connected to the 
Internet, then click Next. 

5 If you purchased your computer with Norton 
Antivirus already installed, you must accept the 
license agreement in order to use Norton Antivirus. 
Click I accept the license agreement, then click 
Next. 

6 In the first Registration window, select the Country/ 
Region from which you are registering. 

7 If you would like information from Symantec about 
Norton Antivirus, check the method by which you 
want to receive that information, type the 
corresponding address and phone number, then click 
Next. 

8 Check if you would like to receive postal mail from 
Symantec. 

9 Type your name and address, then click Next. 

10 Make sure your computer is connected to the 
Internet, then click Next to activate. 
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11 Click Finish. 

12 Select the post-installation tasks that you want Norton 
Antivirus to perform automatically. Your options are: 



Run LiveLlpdate 


Ensure that you have the latest virus 




definitions. 




See "Keeping current with LiveLlpdate" 
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Create a Rescue 


If you are installing in Windows 98/ 


DISK jGI 


Me, you also have the option to 




create a Rescue Disk set. 




See "Create and use Rescue Disks" on 




page «. 
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See "Manually scan disks, folders, and 




files" on page 76. 
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scans of local 


hard drives. You must have Microsoft 


hard drives 


Scheduler installed to use this 




option. If you select this option, you 




can change the schedule for this 




scan as desired. 




See "Schedule scans" on page 81. 


Enable Auto- 


Set the option to scan compressed 


Protect to scan 


files automatically by Auto-Protect. 


inside of 


See "About System options" on 


compressed files 


page 6i. 



13 Click Next. 

14 Review the post-installation tasks and configuration 
settings for Norton Antivirus. 

If you want to change any of the settings, do so using 
Options. 

15 Click Finish. 

If you selected any post-installation tasks, they start 
automatically. 



See "Customize 
Norton Antivirus" 
on page 60. 
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Read the Readme file 

The Readme file contains technical tips and information 
about product changes that occurred after this guide 
went to press. It is installed on your hard disk in the 
same location as the Norton Antivirus product files. 

To read the Readme file 

1 Using Windows Explorer, navigate to the location in 
which your Norton Antivirus files are installed. 

If you installed Norton Antivirus in the default 
location, the files are in C:\Program Files\Norton 
Antivirus. 

2 Double-click Readme.txt to open the file in Notepad 
or Wordpad. 

The Readme file includes instructions for printing it if 
you want to do so. 

3 Close the word-processing program when you are 
done reading the file. 
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If you need to uninstall Norton Antivirus 

If you need to remove Norton Antivirus from your 
computer, you can use the Add/Remove Programs option 
in the Windows Control Panel. 

(!) During uninstallation, Windows may indicate that it is 
installing software. This is a standard Microsoft 
installation message and can be disregarded. 

To uninstall Norton Antivirus from the Windows 
Control Panel 

1 Do one of the following: 

■■ On the Windows taskbar, click Start > Settings > 

Control Panel. 
■! On the Windows XP taskbar, click Start > Control 

Panel. 

2 In the Control Panel, double-click Add/Remove 
Programs. 

3 In the list of currently installed programs, click 
Norton Antivirus. 

k Do one of the following: 

■! In Windows 98/Me, click Add/Remove. 
■: In Windows 2000/XP, click Remove. 

5 Click Remove All to confirm that you want to 
uninstall the product. 

6 If you have files in Quarantine, you are asked if you 
want to delete them. Your options are: 



Yes 


Deletes the quarantined files from your 




computer 


No 


Leaves the quarantined files on your 




computer, but makes them inaccessible 



7 Click Reboot Now, then click Finish. 



Basics 




Basics include general information about how to: 

ss Work with your Symantec product. 

ss Keep your computer protected. 

ss Customize options. 

ss Monitor protection activities. 

ss Access more information. 



Check the version number 

You can check the version number of your product on 
your computer. Use the version number to help you find 
more information about your product on the Symantec 
Web site. 

To check the version number 

1 Start your product. 

2 Click Help and Support. 

3 On the Help menu, click About <your product 
name>. 

4 In the About dialog box, select your product name. 
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Start Norton Antivirus 

After installation, Norton Antivirus automatically 
protects any computer on which it is installed. You do not 
have to start the program to be protected. 

To start Norton Antivirus 

❖ Do one of the following: 

•s On the Windows taskbar, click Start > Programs 

> Norton Antivirus > Norton Antivirus 2004. 
■s On the Windows XP taskbar, click Start > More 

Programs > Norton Antivirus > Norton 

Antivirus 2004. 
■s On the desktop, double-click the Norton Antivirus 

icon. 



Use the Norton Antivirus icon in the 
Windows system tray 

Norton Antivirus adds an icon to the Windows system 
tray at the end of the Windows taskbar. Use the icon in 
the Windows system tray to open Norton Antivirus and 
to enable or disable Auto-Protect. 

To use the Norton Antivirus Windows system tray icon 

❖ In the Windows system tray, right-click the Norton 
Antivirus icon, then on the tray icon menu, select the 
option that you want. 



See "Customize 
Norton Antivirus" 
on page 6o. 



Use the Windows Explorer toolbar 

Norton Antivirus adds a button and menu to Windows 
Explorer. 

When you first open Windows Explorer after installing 
Norton Antivirus, you may not see the Norton Antivirus 
button and menu. You might have to restart Windows 
before the toolbar button appears. 
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You may not be able to access the Norton Antivirus 
Windows Explorer menu, depending on your computer's 
configuration. 

To display the Norton Antivirus button and menu 

1 On the View menu, click Toolbars > 
Norton Antivirus. 

2 Click the arrow to the right of the button to view your 
options. Your options are: 



View Status 



View 

Quarantine 



View Activity 
Log 



View Virus 
Encyclopedia 



Launch Scan 
Menu 



Launches Norton Antivirus and displays 
the Status window with system status. 

See "Check Norton Antivirus configuration 
status" on page 41. 

Displays the Quarantine area and the 
files currently stored there. 

See "If Norton Antivirus places files in 
Quarantine" on page 92. 

Displays the Log Viewer, which shows 
you various Norton Antivirus activities, 
such as scans performed and problems 
found. 

See "Monitor Norton Antivirus activities" on 
page k5- 

Connects you to the Symantec Security 
Response Web page, from which you can 
search for information on all types of 
viruses. 

Opens Norton Antivirus in the Scan for 
Viruses pane, on which you can specify a 
scan to run. 
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Activate your product 

Product activation reduces software piracy and ensures 
that you have received genuine Symantec software. 

(!) You must activate your product within 1 5 days of 
installing it or the product will stop working. 

If you did not activate your product using the Information 
Wizard, you will receive an Activation Needed alert every 
day until you activate the product. 

You can activate your product from the Activation 
Needed alert or from the Activation option on the Help 
menu. Activation should take just a few minutes. 

To activate your product from the Activation Needed 
alert 

1 In the alert, click Activate Now. 

2 Click OK. 

3 On the Activation screen, click Next. 

h On the Activation Successful screen, click Finish. 

To activate your product from the Help menu 

1 At the top of the main window, click Help and 
Support > Activation. 

2 On the Activation screen, click Next. 

3 On the Activation Successful screen, click Finish. 
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Check Norton Antivirus configuration 
status 



See "Customize 
Norton Antivirus" 
on page 60. 



If Norton Antivirus is behaving in an unexpected way, or 
if you're not sure that everything is being scanned for 
viruses, check the status on the main window. 

In the System Status pane of the Norton Antivirus main 
window, a check mark indicates that the system status is 
OK and a triangle indicates that your system needs 
attention. If you see a triangle, review the features to see 
which area needs attention. 

If you see an exclamation point, it indicates that your 
subscription is either expired or your virus definitions 
are more than two weeks old. If your subscription is 
expired, renew it to maintain your protection. If your 
subscription is current, then you need to update your 
virus definitions. 

If you need to adjust any settings, use Options. 
To check system status 

1 In the main window, under Norton Antivirus, click 
Status. 
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2 In the System Status pane, review the status to the 
right of each feature. 
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3 For information about a particular feature, select the 
feature. 

The right pane displays a description and a link to 
more information about the feature. 

Check Office Plug-in status 

Office Plug-in protects Microsoft Office documents from 
viruses, worms, and virus-like activities. It scans 
documents whenever you open them in a Microsoft 
Office program. Office Plug-in is enabled in Options. 

(!) If you have set a password for Options, Norton Antivirus 
asks you for the password before you can view or adjust 
the settings. 

To check Office Plug-in status 

1 In the main window, click Options. 

If a menu appears, click Norton Antivirus. 

2 In the left pane of the Options window, under Other, 
click Miscellaneous. 

3 Verify that Office Plug-in is enabled. 
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Temporarily disable Auto-Protect 

If you have not changed the default option settings, Auto- 
Protect loads when you start your computer to guard 
against viruses, Trojan horses, worms, and other 
malicious threats. It checks programs for viruses as they 
are run and monitors your computer and removable 
media for any activity that might indicate the presence of 
a virus. When a virus or virus-like activity is detected, 
Auto-Protect alerts you. 

In some cases, Auto-Protect may warn you about a virus- 
like activity that you know is not the work of a virus. If 
you will be performing such an activity and want to avoid 
the warning, you can temporarily disable Auto-Protect. 

(!) If you have set a password for Options, Norton Antivirus 
asks you for the password before you can view or adjust 
the settings. 

To temporarily disable Auto-Protect 

See "Start Norton 1 In the main window, click Options. 
Antivirus" on jf a m enu appears, click Norton Antivirus. 

2 In the Options window, under System, click Auto- 
Protect. 

3 In the Auto-Protect pane, uncheck Enable Auto- 
Protect. 

Be sure to enable Auto-Protect when you have completed 
your task to ensure that your computer remains 
protected. 



page 38. 
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To enable Auto-Protect 

1 In the main window, click Options. 

If a menu appears, click Norton Antivirus. 

2 In the Options window, under System, click Auto- 
Protect. 

3 In the Auto-Protect pane, check Enable Auto- 
Protect. 

If the Norton Antivirus icon appears in the Windows 
system tray, you can use it to enable and disable Auto- 
Protect. 

To enable or disable Auto-Protect using the icon in 
the Windows system tray 

❖ In the Windows system tray, right-click the Norton 
Antivirus icon, then do one of the following: 
■■ If Auto-Protect is disabled, click Enable Auto- 
Protect. 

■■ If Auto-Protect is enabled, click Disable Auto- 
Protect. 
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Monitor Norton Antivirus activities 

Occasionally, you may need to look at previous Norton 
Antivirus activities, such as when the last system scan 
was done or how many viruses were detected last week. 
Norton Antivirus displays a record of its threat detection, 
application, and error activities in the Log Viewer. 

About the Log Viewer 

The Log Viewer displays the history of activities in each 
Activity Log. An Activity Log is a collection of multiple 
log files, one for each type of information collected: threat 
alerts, application activities, and errors. 

Using the information in the Log Viewer, you can: 

ss View detailed information recorded in each log by 
selecting the log in the left column and viewing the 
the details in the right pane. 

■■ Delete the activity entries for a log by selecting the 
log, then clicking Clear. If you never clear the entries 
for a category, it expands until it reaches the 
maximum size. Then it starts overwriting the oldest 
entries. 

Check the Activity Log 

Check the Activity Log to see what tasks were performed 
and the results of those tasks to make sure that your 
Options settings are appropriate for your particular 
needs. 

To check the Activity Log 

1 In the main window, under Norton Antivirus, click 
Reports. 

2 In the Reports pane, on the Activity Log line, click 
View Report. 
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3 In the left pane, select the log that you want to review. 
Your options are: 



Threat alerts 


A history of threat alerts, such as the ID 




and type of threat, date and time when 




it occurred, the action taken, and the 




version of the virus definitions used. 


Application 


A history of scanning activities, such as 


activities 


when scanning occurred and with what 




results. 


Errors 


Detailed information about any 




problems encountered when scanning 




your computer such as the date, error 




code, and message. 



As you select each log, the right pane changes and 
displays details specific to the particular log. The 
most recent activities appear at the top of the log. 
it When you are finished viewing the information, click 
File > Exit. 
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Create and use Rescue Disks 

(!) Rescue Disks are available only for Windows 98/Me. 

Rescue Disks are images on floppy disks that let you 
restart your computer when your hard disk is damaged 
or infected with a vims. 



About Rescue Disks 

Rescue Disks record a duplicate set of system startup 
files and disk partition information, and store rescue 
utilities, configuration files, and a DOS-based Norton 
Antivirus scanner across multiple floppy disks or on a 
network drive. 

A Rescue Disk set consists of one bootable floppy disk, 
one Norton Antivirus Program floppy disk, and three 
Virus Definition floppy disks. If you have Norton Utilities 
installed, you will also have two Norton Utilities floppy 
disks in your Rescue Disk set. With a Rescue Disk set, 
you can start your computer in DOS mode and use 
Norton Antivirus to fix virus-related problems. 

(!) Rescue Disks contain information specific to the 
computer on which they were made. 

If you are using Rescue Disks for recovery, you must use 
the disks made for your computer. 

If you are using Rescue Disks to scan for viruses, you can 
use disks made for a different computer. 

See "If you need to You should update Rescue Disks whenever you update 

use Rescue Disks to y 0ur virus protection, install new software, or make 

system'^o^ changes to your hardware, 
page 51. 



Create a Rescue Disk set 

You can create Rescue Disks any time. You can start the 
Rescue Disk Wizard from the main window of your 
Symantec product. 
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See "Temporarily If you start the Rescue Disk Wizard from the main 



disable Auto- 
Protect" on 
page 



window, temporarily disable Auto-Protect while you are 
creating the Rescue Disk set. If you do not restart your 
computer after creating Rescue Disks, remember to 
enable Auto-Protect again. 

When you select a floppy disk drive, the Rescue Disk 
program calculates the number of disks that you will 
need to complete the set. Depending on what items you 
want to include in the Rescue Disk set, you might need 
ten or more floppy disks. 

(!) If you choose to create Rescue Disks on a network drive, 
a second physical hard disk, or some other large capacity 
disk drive (but not a CD), your Rescue Disk set is placed 
in a folder on the selected disk. Make sure that you also 
have a bootable floppy disk in a safe location. This disk 
should contain the network drivers or other files 
necessary to start your computer and access the drive on 
which you placed your Rescue Disk set. Creating a 
Rescue Disk set on a startup hard disk, for example, 
drive C, is not recommended because you will not be able 
to access the rescue programs and configuration files if 
your hard disk is damaged and unable to start. 

To create Rescue Disks 

1 In the main window, click Rescue. 

2 In the Rescue Disk window, select the drive on which 
to create the Rescue Disk set. 

To create a Rescue Disk set on floppy disks, select 
drive A. 

When you select a floppy disk drive, the Basic Rescue 
program displays the number of floppy disks that you 
will need to create the Rescue Disk set. 

3 To make changes to the default Rescue Disk settings, 
click Options and do the following: 

■■ On the Rescue Files tab, specify the files to include 
in the Rescue Disk set. If you change the default 
file selection, the number of required floppy disks 
will also change. 

■■ On the Format Settings tab, select the type of 
format, if any, that you want Rescue Disk to use 
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when it prepares the bootable floppy disk for the 
Rescue Disk set. 
k Click OK to return to the Rescue Disk window. 

5 When you have either assembled the required 
number of floppy disks or identified another location 
for the Rescue Disk files, click Create. 

If you selected a floppy disk drive, Rescue Disk 
displays the Basic Rescue Disk List window and an 
estimate of how much time you will need to create the 
entire set. 

6 Label the disks as specified in the Basic Rescue Disk 
List window, then click OK. 

Rescue Disk prompts you to insert the first disk in the 
floppy disk drive. If you selected a network drive or 
other larger-format drive, Rescue Disk prompts you 
for a Rescue Folder drive location. 

7 Insert the disks as requested. 

8 When you have finished creating the basic Rescue 
Disk set, in the Rescue Disk window, click Close. 

Test your Rescue Disks 

After you have created the Rescue Disk set, you are 
prompted to test your disks. This requires that you 
restart your computer using the Rescue Disks. 

If you created Rescue Disks on a network drive, a second 
physical hard disk, or some other large capacity disk 
drive, you will have to restart into DOS from an external 
floppy disk, navigate to the Rescue folder, and run 
Rescue.exe. 

To test your Rescue Disks 

1 Close all open Windows programs. 

2 Insert the disk labeled Basic Rescue Boot Floppy Disk 
into drive A, then click Restart. 
If the Rescue Disk screen appears on your monitor, 
the Rescue Disk works properly. 
If the Rescue Disk screen does not appear, you have 
several options for correcting the problem. 

3 Press Escape to exit to DOS. 



(D 



See "My Rescue 
Disk does not 
work" on page 101, 
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h Remove the disk from drive A and slide open the 

plastic tab on the back of the disk to write-protect it. 
5 Restart your computer. 

Update your Rescue Disks 

You can update your Rescue Disks as often as you like. 
Rescue Disk lets you update your basic Rescue Disk set 
without having to recreate them. 

If you are updating a floppy disk set, make sure that your 
disks are not write-protected before you begin. 

To update your Rescue Disks 

1 In the main window, click Rescue. 

2 In the Rescue Disk window, under Select Destination 
Drive, click drive A, then click Update. 

A message prompts you to insert the disk labeled 
Basic Rescue Boot Floppy Disk into drive A. 

3 Insert the Basic Rescue Boot Floppy Disk into drive A, 
then click OK. 

k Insert the remaining disks in your set as requested. 

See "Test your Make sure to test your newly updated Rescue Disk set 

Rescue Disks" on wnen prompted, 
page k9. 



Rescue Disk options 

Rescue Disk has the following options. 



Add Files 


Click to specify additional files that you want Rescue Disk 




to store on the Rescue Disk set. 




({) Do not use this as a backup utility. Add files only if 




they are needed to restore your system after a crash. 


Remove File 


Click to remove the selected file under User-selected 




Files. The files will no longer be included on the Rescue 




Disk set. 
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Rescue items list 


The list is categorized and presented in a hierarchical 
view, similar to a Windows Explorer view. Click the plus 
sign next to a category to expand the list and see what 
the category contains. Click the plus sign next to a 
specific file for more information about the file. 
The list of rescue items is different depending on the 
programs you have installed and the type of Rescue Disk 
set you are using. 


Basic Rescue Boot 
Floppy Files 


Files that Rescue Disk stores on the floppy disk that you 
use to start your system. 


Rescue DOS Utility 
Programs 


DOS-based emergency programs that Rescue Disk stores 
on the Rescue Disk set. You can use these DOS-based 
utilities to recover your system. 


Norton Antivirus 
Program 


Norton Antivirus program files. 


Definitions Disks 


Virus definitions files used by Norton Antivirus to scan 
your system in an emergency. There are several of these 
disks. 


User-selected Files 


Files you have added to the Rescue Disk set. Add files to 
this list by clicking Add Files. Remove files from this list 
by clicking the file, then clicking Remove File. 



If you need to use Rescue Disks to restore 
your system 

(!) Rescue Disks are available only for Windows 98/Me. 

Sometimes a virus or threat prevents your computer 
from starting normally. Some viruses can only be 
removed if the computer is started from a clean disk, not 
the infected hard disk. Often, a Norton Antivirus alert 
tells you when to use your Rescue Disks. 
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You first need to determine if your Rescue Disks are 
current. This means that you have created or updated 
your Rescue Disks since you did any of the following: 

ss Added, modified, or removed internal hardware 
ss Added, modified, or removed hard disk partitions 
ss Upgraded your operating system 
ss Updated virus definitions 

If your Rescue Disks are not current, you can still use 
them to remove viruses from your computer. When the 
Rescue Disk screen appears, use only the Norton 
Antivirus task. 

To use your Rescue Disks 

1 Insert the Basic Rescue Boot Floppy Disk into drive A 
and restart your computer. 

The Rescue program runs in DOS. 

2 Use the arrow keys to select the program that you 
want to run. 

A description of the selected program appears in the 
right pane of the Rescue program. Your options are: 



Norton 


Scans your computer for viruses and 


Antivirus 


repairs any infected files 


Rescue 


Checks and restores boot and partition 


Recovery 


information 



3 Press Enter to run the selected program. 

it Follow the on-screen instructions for inserting and 

removing the Rescue Disks. 
5 When the Rescue program is done, remove the 

Rescue Disk from drive A and restart your computer. 
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For more information 

The product documentation provides glossary terms, 
online Help, a Readme file, the User's Guide in PDF 
format, and links to the Knowledge Base on the Symantec 
Web site. 

Look up glossary terms 

Technical terms that are italicized in the User's Guide 
are defined in the glossary, which is available in both the 
User's Guide PDF and Help. In both locations, clicking a 
glossary term takes you to its definition. 

Use online Help 

Help is available throughout your Symantec product. 
Help buttons or links to more information provide 
information that is specific to the task that you are 
completing. The Help menu provides a comprehensive 
guide to all of the product features and tasks that you can 
complete. 

To use online Help 

1 At the top of the main window, click Help & Support 
> Norton Antivirus. 

2 In the Help window, in the left pane, select a tab. Your 



options are: 


Contents 


Displays the Help by topic 


Index 


Lists Help topics in alphabetical order 




by key word 


Search 


Opens a search field in which you can 




enter a word or phrase 
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Window and dialog box Help 

Window and dialog box Help provides information about 
the program. This type of Help is context-sensitive, 
meaning that it provides help for the dialog box or 
window that you are currently using. 

To access window or dialog box Help 

❖ Do one of the following: 

■• In the window, click any available Help link. 
■! In the dialog box, click Help. 

Readme file 

The Readme file contains information about installation 
and compatibility issues. It also contains technical tips 
and information about product changes that occurred 
after this guide went to press. It is installed on your hard 
disk in the same location as the product files. 

To read the Readme file 

1 In Windows Explorer, double-click My Computer. 

2 Double-click the hard disk on which you installed 
Norton Antivirus. 

In most cases, this will be drive C. 

3 Click Program Files > Norton Antivirus. 
k Double-click Readme.txt. 

The file opens in Notepad or your default word 
processing program. 
5 Close the word processing program when you are 
done reading the file. 

Access the User's Guide PDF 

The Norton Antivirus User's Guide is provided on the CD 
in PDF format. You must have Adobe Acrobat Reader 
installed on your computer to read the PDF. 

(!) If you purchased this product as an electronic download, 
Adobe Acrobat Reader was not included. You must 
download it from the Adobe Web site. 
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To install Adobe Acrobat Reader 

1 Insert the CD into the CD-ROM drive. 

2 Click Browse CD. 

3 In the CD window, double-click the Manual folder. 
k Double-click the Acrobat folder. 

5 Double-click the program file. 

6 Follow the on-screen instructions to select a folder for 
Adobe Acrobat Reader and complete the installation. 

Once you have installed Adobe Acrobat Reader, you can 
read the PDF from the CD. 

(!) If you do not have a CD, you can download the PDF from 
the Symantec Service & Support Web site. 

To read the User's Guide PDF from the CD 

1 Insert the CD into the CD-ROM drive. 

2 Click Browse CD. 

3 Double-click the Manual folder. 

4 Double-click the Norton Antivirus PDF. 

You can also copy a User's Guide to your hard disk and 
read it from there. 

To read a User's Guide from your hard disk 

1 Open the location into which you copied the PDF. 

2 Double-click the PDF. 

Symantec products on the Web 

The Symantec Web site provides extensive information 
about all Symantec products. There are several ways to 
access the Symantec Web site. 
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To access the Web site from the Help menu 

❖ Select the solution that you want. Your options are: 



Symantec Security 


Takes you to the Security Response 


Response 


page of the Symantec Web site, 




from which you can update your 




protection and read the latest 




information about antithreat 




technology. 


More Symantec 


Takes you to the Symantec Store 


solutions 


Web site, from which you can get 




product information on every 




Symantec product. 



Within your Symantec product, the Reports page 
contains a link to the Symantec online Virus 
Encyclopedia, as does the Windows Explorer toolbar. 

To access the Web site from the Reports page 

1 In the main window, under Norton Antivirus, click 
Reports. 

2 On the Reports page, next to Online Virus 
Encyclopedia, click View Report. 

To access the Symantec Web site from Windows 
Explorer 

1 Open Windows Explorer. 

2 On the toolbar, on the Norton Antivirus menu, click 
View Virus Encyclopedia. 

This option connects you to the Symantec Security 
Response Web page, from which you can search for 
information on all types of viruses. 

To access the Symantec Web site in your browser 

❖ On the Internet, go to www.symantec.com 
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Subscribe to the Symantec Security Response 
newsletter 

Each month, Symantec publishes a free electronic 
newsletter that is focused on the needs of Internet 
security customers. It discusses the latest antivirus 
technology produced by Symantec Security Response, 
common viruses, trends in virus workings, virus 
outbreak warnings, and special virus definitions releases. 

To subscribe to the Symantec Security Response 
newsletter 

1 On the Internet, go to 
securityresponse.symantec.com 

2 On the security response Web page, scroll down to the 
reference area of the page, then click Newsletter. 

3 On the security response newsletter Web page, select 
the language in which you want to receive the 
newsletter. 

k On the subscribe Web page, type the information 
requested, then click Subscribe. 
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Options 




The default settings for this product provide complete 
protection for your computer. However, you may want to 
adjust them to optimize system performance or disable 
options that do not apply. You can change the product's 
settings to fit your work environment. 

If you are using Windows 2000/XP, you will need 
administrator access to change options. If you are an 
administrator and share your computer with others, keep 
in mind that the changes that you make apply to 
everyone using the computer. 
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Customize Norton Antivirus 

The default settings for Norton Antivirus provide 
complete virus protection for your computer. However, 
you may want to adjust them to optimize system 
performance or disable options that do not apply. 

Norton Antivirus provides password protection for your 
option settings. You can enable, change, and reset a 
password so that unauthorized users cannot tamper with 
your settings. 

All of the options are organized into three main 
categories. The options contained under each category 
are as follows. 



Category 


Options 


System 


Auto- Protect 




Manual Scan 


Internet 


Email 




Instant Messenger 




LiveUpdate 


Other 


Threat Categories 

Inoculation (Windows 98/98SE/Me) 
Miscellaneous 



This section does not describe how to change the 
individual options, but gives a general description of 
what they do and how you can find them. For specific 
information about a particular option, check the online 
Help. 
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About System options 

The System options control scanning and monitoring of 
your computer. You use System options to determine 
what gets scanned, what the scan is looking for, and what 
happens when a virus or virus-like activity is 
encountered. 

With higher levels of protection, there can be a slight 
trade-off in computer performance. If you notice a 
difference in your computer's performance after 
installation, you may want to set protection to a lower 
level or disable those options that you do not need. 

The System options that you can set are as follows. 



Option 


Description 


Auto-Protect 


Determine if Auto-Protect starts when you start your 
computer, what it looks for while monitoring your 
computer, and what to do when a virus is found. 
Auto-Protect options also include Bloodhound, 
Advanced, and Exclusions subcategories. 
■■ Bloodhound is the scanning technology that protects 

against unknown viruses. Use these options to set its 

level of sensitivity in Auto-Protect. 

!! Advanced options determine the activities to be 
monitored when scanning for virus-like activities and 
when scanning floppy disks. 

■■ Exclusions specify the files that should not be 
scanned by file name extension or by specific file 
name. Be careful not to exclude the types of files that 
are more likely to be infected by viruses such as files 
with macros or executable files. 


Manual Scan 


Determine what gets scanned and what happens if a 
virus or threat is found during a scan that you request. 
Manual Scan options also include Bloodhound and 
Exclusions subcategories. 
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About Internet options 



Internet options define what happens when your 
computer is connected to the Internet. You use Internet 
options to define how Norton Antivirus should scan 
email and instant messenger attachments, enable Worm 
Blocking, and determine how updates should be applied 
with LiveUpdate. 

The Internet options you can set are as follows. 


Option 


Description 


Email 


Enable email scanning and Worm Blocking, and define 
how Norton Antivirus should behave while scanning 
email messages. Scanning incoming email messages 
protects your computer against viruses sent by others. 
Scanning outgoing email messages prevents you from 
inadvertently transmitting viruses or worms to others. 
You can choose to scan incoming or outgoing email 
messages, or both, and to display an icon or progress 
indicator while scanning. You can set options to 
automatically repair, quarantine, or delete infected 
email messages with or without interaction with you. 
Advanced options determine what to do when scanning 
email messages. 


Instant Messenger 


Determine what instant messengers to support, how to 
configure a new instant messenger, and what happens if 
a virus is found during an instant messenger session. 


LiveUpdate 


Enable Automatic LiveUpdate and define how updates 
should be applied. Automatic LiveUpdate checks for 
updated virus definitions automatically when you are 
connected to the Internet. 
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About Other options 

Other options include Inoculation settings for Windows 
98/98SE/Me and Miscellaneous settings. You can enable 
Inoculation, cause an alert if a system file changes, set a 
variety of miscellaneous options, and customize behavior 
for the Norton Protected Recycle Bin. 

The Other options that you can set are as follows. 



Option 


Description 


Threat Categories 


Determine the threats that you want Norton Antivirus to 
detect. Advanced options include how to respond when 
a threat is found and what to do when deleting threats. 
Exclusions options specify the files that should not be 
scanned by file name extension or by specific file name. 


Inoculation 


Enable Inoculation and, if a system file changes, choose 
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restoring it to its original values. 

Inoculation options are available only on Windows 98/ 

98SE/Me. 


Miscellaneous 


Back up file in Quarantine before attempting a repair. 

(This option is automatically set to On.) 

Enable Office Plug-in. If you upgrade to Microsoft Office 

2000 or later after Norton Antivirus is installed, you must 

enable this option to automatically scan Microsoft Office 

files. 

Alert me if my virus protection is out of date. 

Scan files at system startup (Windows 98/98SE only). 

Enable password protection for options. 



Set Norton Antivirus options 

You change the settings for Norton Antivirus options in 
the Options window. 

(!) If you set a password for Options, Norton Antivirus asks 
you for the password before you can continue. 
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To change settings 

1 In the main window, click Options. 

If a menu appears, click Norton Antivirus. 

2 In the Options window, in the left pane, select an 
option in the list. 

Options with an arrow to the left have sub-options. As 
you select an option, the corresponding settings for 
the selected option appear in the right pane. 

3 Select any settings that you want to change. 
it Click OK. 

These settings now take precedence over the preset 
options. The changes take effect immediately. 

If you need to restore default Norton Antivirus 
settings 

You can change any or all of the options listed. If you 
have made a number of changes that have unwanted 
results, you can restore all options to the default settings. 

(!) If you set a password for Options, Norton Antivirus asks 
you for the password before you can view or adjust the 
settings. 

To restore default settings on an Options page 

❖ On the page for which you want to restore default 
settings, click Page Defaults. 

To restore default settings for all options 

♦ On any page in the Options window, click Default 
All. 
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Password protect Norton Antivirus 
options 

To protect your Norton Antivirus options from being 
changed without your permission, you can choose to 
protect or remove protection from your option settings 
with a password. If you specify a password, you are 
asked to enter a password every time that you view the 
Options window, or temporarily enable or disable Auto- 
Protect. 

If you forget your password, you can reset it from the 
Help button in the Norton Antivirus main window. See 
the online Help for more information about resetting your 
password. 

To specify or remove a password 

1 Click Options. 

If a menu appears, click Norton Antivirus. 

2 In the Options window, under Other, click 
Miscellaneous. 

3 Check or uncheck Enable password protection for 
options. 

if In the password dialog box, type a password. 
5 Click OK. 
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Symantec products depend on current information to 
protect your computer from newly discovered threats. 
Symantec makes this information available to you 
through LiveUpdate. Using your Internet connection, 
LiveUpdate obtains program updates and protection 
updates for your computer. 

Your normal Internet access fees apply when you use 
LiveUpdate. 

(!) If your computer uses Windows 2000/XP, you must have 
Administrator access privileges to run LiveUpdate. 



About program updates 

Program updates are minor improvements to your 
installed product. These differ from product upgrades, 
which are newer versions of entire products. Program 
updates that have self-installers to replace existing 
software code are called patches. Patches are usually 
created to extend operating system or hardware 
compatibility, adjust a performance issue, or fix bugs. 

LiveUpdate automates the process of obtaining and 
installing program updates. It locates and obtains files 
from an Internet site, installs them, and then deletes the 
leftover files from your computer. 
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About protection updates 



Protection updates are files that are available from 
Symantec that keep your Symantec products up-to-date 
with the latest anti-threat technology. The protection 
updates you receive depend on which product you are 
using. 



Norton Antivirus, Norton 
Antivirus Professional, 
Norton System Works, 
Norton SystemWorks 
Professional, Symantec 
Antivirus for Handhelds - 
Annual Service Edition 

Norton Internet Security, 
Norton Internet Security 
Professional 



Norton Personal Firewall 



Norton AntiSpam 



Users of Norton Antivirus, Norton SystemWorks, 
and Symantec Antivirus for Handhelds - Annual 
Service Edition products receive virus protection 
updates, which provide access to the latest virus 
signatures and other technology from Symantec. 



In addition to the virus protection updates, users 
of Norton Internet Security products also receive 
protection updates for Web filtering, intrusion 
detection, and Norton AntiSpam. 
The Web filtering protection updates provide the 
latest lists of Web site addresses and Web site 
categories that are used to identify inappropriate 
Web content. 

The intrusion detection updates provide the latest 
predefined firewall rules and updated lists of 
applications that access the Internet. These lists 
are used to identify unauthorized access attempts 
to your computer. 

Norton AntiSpam updates provide the latest spam 
definitions and updated lists of spam email 
characteristics. These lists are used to identify 
unsolicited email. 

Users of Norton Personal Firewall receive intrusion 
detection updates for the latest predefined 
firewall rules and updated lists of applications 
that access the Internet. 

Users of Norton AntiSpam receive the latest spam 
definitions and updated lists of spam email 
characteristics. 
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Obtain updates using LiveUpdate 

LiveUpdate checks for updates to all of the Symantec 
products that are installed on your computer. 

If your Internet service provider does not automatically 
connect you to the Internet, connect to the Internet first, 
and then run LiveUpdate. 

To obtain updates using LiveUpdate 

1 At the top of the main window, click LiveUpdate. 

2 In the LiveUpdate window, click Next to locate 
updates. 

3 If updates are available, click Next to download and 
install them. 

if When the installation is complete, click Finish. 

Some program updates may require that you restart your 
computer after you install them. 

should update 

Run LiveUpdate as soon as you have installed your 
product. Once you know that your files are up-to-date, 
run LiveUpdate regularly to obtain updates. For example, 
to keep your virus protection current, you should use 
LiveUpdate once a week or whenever new viruses are 
discovered. Program updates are released on an as- 
needed basis. 

If you can't use LiveUpdate 

When new updates become available, Symantec posts 
them on the Symantec Web site. If you can't run 
LiveUpdate, you can obtain new updates from the 
Symantec Web site. 

To obtain updates from the Symantec Web site 

1 Point your Web browser to 
securityresponse.symantec.com 



(!) 
(!) 

When you 
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2 Follow the links to obtain the type of update that you 
need. 

Set LiveUpdate to Interactive or Express 
mode 

LiveUpdate runs in either Interactive or Express mode. In 
Interactive mode (the default), LiveUpdate downloads a 
list of updates that are available for your Symantec 
products that are supported by LiveUpdate technology. 
You can then choose which updates you want to install. 
In Express mode, LiveUpdate automatically installs all 
available updates for your Symantec products. 

To set LiveUpdate to Interactive or Express mode 

1 At the top of the main window, click LiveUpdate. 

2 In the LiveUpdate welcome screen, click Configure. 

3 In the LiveUpdate Configuration dialog box, on the 
General tab, select the mode that you want. Your 
options are: 



Interactive Mode 


Gives you the option of choosing 




which updates you want to install 


Express Mode 


Automatically installs all available 




updates 



k If you selected Express Mode, select how you want to 
start checking for updates. Your options are: 



I want to press the 


Gives you the option of cancelling 


start button to run 


the update 


LiveUpdate 




I want LiveUpdate 


Installs updates automatically 


to start 


whenever you start LiveUpdate 


automatically 
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5 To have access to a Symantec self-help Web site in the 
event that an error occurs while using LiveUpdate, 
check Enable Enhanced Error Support. 

6 Click OK. 

Turn off Express mode 

Once you have set LiveUpdate to run in Express mode, 
you can no longer access the LiveUpdate Configuration 
dialog box directly from LiveUpdate. You must use the 
Symantec LiveUpdate control panel. 

To turn off Express mode 

1 On the Windows taskbar, click Start > Settings > 
Control Panel. 

2 In the Control Panel window, double-click Symantec 
LiveUpdate. 

3 In the LiveUpdate Configuration dialog box, on the 
General tab, click Interactive Mode. 

h Click OK. 

If you run LiveUpdate on an internal 
network 

If you run LiveUpdate on a computer that is connected to 
a network that is behind a company firewall, your 
network administrator might set up an internal 
LiveUpdate server on the network. LiveUpdate should 
find this location automatically. 

If you have trouble connecting to an internal LiveUpdate 
server, contact your network administrator. 
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Run LiveUpdate automatically 

You can have LiveUpdate check for protection updates 
automatically, on a set schedule, by enabling Automatic 
LiveUpdate. You must continue to run LiveUpdate 
manually to receive product updates. 

(!) Automatic LiveUpdate checks for an Internet connection 
every five minutes until a connection is found, and then 
every four hours. If you have an ISDN router that is set to 
automatically connect to your Internet service provider 
(ISP), many connections will be made, with connection 
and phone charges possibly being incurred for each 
connection. If this is a problem, you can set your ISDN 
router to not automatically connect to the ISP or disable 
Automatic LiveUpdate. 

To enable Automatic LiveUpdate 

1 At the top of the main window, click Options. 
If a menu appears, click Norton Antivirus. 

(!) If you set a password for Options, you must provide 

the password before you can continue. 

2 in the Options window, under Internet, click 
LiveUpdate. 

3 In the LiveUpdate pane, check Enable Automatic 
LiveUpdate. 
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4 Set how you want updates to be applied. Your options 
are: 



Apply updates 


LiveUpdate checks for and installs 


without 


protection updates without 


interrupting me 


prompting you. LiveUpdate displays 




an alert when a protection update 




has been downloaded. You should 




still run LiveUpdate occasionally to 




check for program updates. 


Notify me when 


LiveUpdate checks for protection 


updates are 


updates and asks if you want to 


available 


install them. 



5 Click OK. 

To delete the schedule for Automatic LiveUpdate, disable 
Automatic LiveUpdate. 

To disable Automatic LiveUpdate 

1 At the top of the main window, click Options. 
If a menu appears, click Norton Antivirus. 

If you set a password for Options, you must provide 
the password before you can continue. 

2 In the Options window, under Internet, click 
LiveUpdate. 

3 In the LiveUpdate pane, uncheck Enable Automatic 
LiveUpdate. 

h Click OK. 
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About your subscription 

Your Symantec product includes a complimentary, 
limited-time subscription to protection updates that are 
used by your product. When the subscription is due to 
expire, you are prompted to renew your subscription. 

If you do not renew your subscription, you can still use 
LiveUpdate to obtain program updates. However, you 
cannot obtain protection updates through LiveUpdate or 
from the Symantec Web site and will not be protected 
against newly discovered threats. Also, whenever you use 
LiveUpdate, you will receive a warning that your 
subscription has expired. Follow the on-screen 
instructions to complete your subscription renewal. 



See "About 
protection 
updates" on 
page 68. 



Protecting disks, 
files, and data from 
viruses 



Keeping your computer protected requires regular 
monitoring by Auto-Protect and Worm Blocking; 
scanning of your email attachments and files transferred 
by instant messenger; and frequent system scans. All of 
these tasks can be set to occur automatically. 

For added protection in Norton Antivirus on Windows 
98/98SE/Me, enable Inoculation to alert you if a system 
file changes. 

Ensure that protection settings are 
enabled 

Norton Antivirus is configured to provide you with 
complete protection against viruses. It is unlikely that 
you need to change any settings. However, for maximum 
protection, you should ensure that your protection 
features are enabled. 

(!) For specific information about a particular option and its 
protection settings, see the online Help. 
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This table summarizes the maximum protection settings 
and where you can find them. 



Feature 


In the main window, 
click 


Then for maximum 
protection, select 


Auto- Protect 


Enable 


On 


Email scanning 


Options > Email 


■■ Scan incoming Email 

■■ Scan outgoing Email 

If your email program uses one 
of the supported 
communications protocols, 
both options are selected by 
default. 


Timeout protection 


Options > Email 


Protect against timeouts when 

scanning Email 

To prevent connection 

timeouts while receiving large 

attachments, enable timeout 

protection. 


Instant messenger 
scanning 


Options > Instant 
Messenger 


Instant messengers that you 
want to protect 


Worm Blocking 


Options > Email 


!! Enable Worm Blocking 

■■ Alert me when scanning 
email attachments 


Inoculation 
(Windows 98) 


Options > Inoculation 


Inoculate Boot Records 



Manually scan disks, folders, and files 

If Auto-Protect is enabled and the Norton Antivirus 
options are set at their default levels, you normally would 
not need to scan manually. However, if you temporarily 
disabled Auto-Protect (for example, to load or use another 
program that conflicts with Norton Antivirus), and you 
forgot to enable it again, it is possible that a virus could 
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be on your hard disk undetected. You can scan your 
entire computer, or individual floppy disks, drives, 
folders, or files. 

Although the default settings for manual scanning are 
usually adequate, you can raise the level of Bloodhound 
heuristics or adjust the options for manual scanning in 
the Options window. 

For more information about manual scanning options, 
see the online Help. 

Perform a full system scan 

A full system scan scans all boot records and files on your 
computer. 

To perform a full system scan 

1 On the left side of the main window, under Norton 
Antivirus, click Scan for Viruses. 

2 In the Scan for Viruses pane, under Task, click Scan 
my computer. 
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3 Under Actions, click Scan. 

When the scan is complete, a scan summary appears. 
k When you are done reviewing the summary, click 

Finished. 
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Scan individual elements 

Occasionally, you may want to scan a particular file, 
removable drives, a floppy disk, any of your computer's 
drives, or any folders or files on your computer. You may 
have been working with floppy disks or have received a 
compressed file in an email message and suspect a virus. 
You can scan just a particular disk or individual element 
that you want to check. 

To scan individual elements 

1 On the left side of the main window, under Norton 
Antivirus, click Scan for Viruses. 

2 in the Scan for Viruses pane, under Task, select the 
scan that you want to run. 

3 Under Actions, click Scan. 
If you choose to scan all removable drives or a floppy 
disk, the scan starts automatically. If you choose to 
scan drives, folders, or files, a dialog box appears in 
which you choose which drives, folders, or files to 
scan. 

it In the dialog box, make your selection, then click 
Scan. 

When the scan is complete, a scan summary appears. 
5 When you are done reviewing the summary, click 
Finished. 

are found during a scan 

At the end of a scan, a summary report appears to tell 
you what Norton Antivirus found during the scan. If a 
virus was found and you have requested that Norton 
Antivirus repair the file automatically, it is listed as 
repaired. If the file cannot be repaired, it can be 
quarantined or deleted. 



If problems 

See "What to do if 
a virus is found" 
on page 85. 
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Create and use custom scans 

See "Schedule a You can create a custom scan if you regularly scan a 
custom scan" on particular segment of your computer and don't want to 
page have to specify the segment to be scanned every time. 

You can also schedule the custom scan to run 

automatically. 

You can delete the scan when it is no longer necessary. 
For example, if you are working on a project for which 
you need to frequently swap files with others, you might 
want to create a folder into which you copy and scan 
those files before using them. When the project is done, 
you can delete the custom scan for that folder. 

To create a custom scan 

1 On the left side of the main window, under Norton 
Antivirus, click Scan for Viruses. 

2 In the Scan for Viruses pane, under Actions, click 
New. 

3 In the opening window of the Norton Antivirus Scan 
Wizard, click Next. 

4 Select the items that you want to scan. Your options 
are: 



Add files 
Add folders 



Select individual files to be scanned. 
Select folders and drives to be scanned. 



You can use both options to select the combination of 
items that you want. 

In the resulting dialog box, select the items that you 
want to scan. 

If you select a folder, all files in that folder are 
included. If you select a drive, all folders and files on 
that drive are included. 

Add the selected items to the list of items to scan by 

doing one of the following: 

■! In the Scan Files dialog box, click Open. 

■s In the Scan Folders dialog box, click Add. 
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7 If you need to remove an item from the list, select it, 
then click Remove. 

8 When you are done creating the list of items to be 
scanned, click Next. 

9 Type a name for the scan by which you can identify it 
in the list of scans. 

10 Click Finish. 

Run a custom scan 

When you run a custom scan, you do not have to redefine 
what you want to scan. 

To run a custom scan 

1 On the left side of the main window, under Norton 
Antivirus, click Scan for Viruses. 

2 In the Scan for Viruses pane, under Task, select the 
custom scan. 

3 Under Actions, click Scan. 

When the scan is complete, a scan summary appears. 

4 When you are done reviewing the summary, click 
Finished. 

Delete a custom scan 

You can delete custom scans if they are no longer 
needed. 

To delete a custom scan 

1 On the left side of the main window, under Norton 
Antivirus, click Scan for Viruses. 

2 In the Scan for Viruses pane, under Task, select the 
custom scan that you want to delete. 

(!) If you click the button next to the scan name, the scan 

runs. 

3 Under Actions, click Delete. 

it Click Yes to verify that you want to delete the scan. 
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Schedule 



scans 



After installation, Norton Antivirus automatically runs a 
weekly full system scan. You can also set up a schedule 
for custom virus scans. 

You can schedule customized virus scans that run 
unattended on specific dates and times or at periodic 
intervals. If you are using the computer when the 
scheduled scan begins, it runs in the background so that 
you do not have to stop working. 

(!) You cannot schedule the predefined scans in the scan 
list, but you can schedule any custom scans that you 
have created. 



You have complete flexibility in scheduling custom 
scans. When you select how frequently you want a scan 
to run (such as daily, weekly, or monthly), you are 
presented with additional fields with which you can 
refine your request. For example, you can request a daily 
scan, then schedule it to occur every two days or every 
three days instead. 

To schedule a custom scan 

1 On the left side of the main window, under Norton 
Antivirus, click Scan for Viruses. 

2 In the Scan for Viruses pane, under Task, select the 
custom scan that you want to schedule. 

(!) If you click the button next to the scan name, the scan 



3 Under Schedule Task, click Schedule. 

4 In the Schedule dialog box, if Show multiple 
schedules is checked, click New to enable the 
scheduling fields. 

If it is not checked, the fields are already enabled. 



Schedule a 



custom scan 



runs. 
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5 Set the frequency and time at which you want the 
scan to run. 

Most of the frequency options include additional 
options that let you further refine the schedule. Set 
the additional options as necessary. 

6 When you are done, click OK. 

You can also create multiple schedules for a scan. For 
example, you could run the same scan at the beginning 
of your work day and at the end. 

To create multiple schedules for a single scan 

1 On the left side of the main window, under Norton 
Antivirus, click Scan for Viruses. 

2 In the Scan for Viruses pane, under Task, select the 
custom scan that you want to schedule. 

(!) If you click the button next to the scan name, the scan 

runs. 

3 Under Schedule Task, click Schedule. 

h In the Schedule dialog box, check Show multiple 
schedules. 

5 To set an additional schedule, click New. 

6 Set the frequency and time at which you want the 
scan to run. 

Most of the frequency options include additional 
options that let you further refine the schedule. Set 
the additional options as necessary. 

7 When you are done, click OK. 
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Edit scheduled scans 



You can change the schedule of any scheduled scan, 
including the weekly full system scan. 

To edit a scheduled scan 

1 On the left side of the main window, under Norton 
Antivirus, click Scan for Viruses. 

2 In the Scan for Viruses pane, under Task, select the 
scan that you want to reschedule. 

(!) If you click the button next to the scan name, the scan 

runs. 

3 Under Schedule Task, click Schedule. 
Zf Change the schedule as desired. 

5 Click OK. 



Delete a scan schedule 



You can delete any scan schedule. Deleting the schedule 
does not delete the scan. 

To delete a scan schedule 

1 On the left side of the main window, under Norton 
Antivirus, click Scan for Viruses. 

2 In the Scan for Viruses pane, under Task, select the 
scan whose schedule you want to delete. 

(!) If you click the button next to the scan name, the scan 

runs. 

3 Under Schedule Task, click Schedule. 

4 In the Schedule dialog box, check Show multiple 
schedules. 

5 Select the schedule or schedules that you want to 
delete. 

6 Click Delete. 

7 Click OK. 
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What to do if a virus 
is found 



(!) If after reviewing the information in this chapter, you 
have not resolved your problem, see "Responding to 
emergencies" on page 1 1 and "Troubleshooting" on 
page 95. 

If Norton Antivirus finds a virus or a file containing a 
virus or a potential security risk on your computer, there 
are several possible resolutions to the problem: 

ss Fix infection 

Removes the virus from the file or if the threat is a 
worm or Trojan horse, deletes the file. 

See "If Norton !! Quarantine infection 

Antivirus places Makes the file inaccessible by any programs other 

!j' es in .. „ than a Symantec antivirus program. You cannot 

Quarantine on ' r ° 

p a g e 92 . accidentally open the file and spread the virus, but 

you can still evaluate it for possible submission to 

Symantec. 
:: Delete the file 

Removes the virus from your computer by deleting 

the file that contains the virus, worm, or Trojan horse. 

It should be used only if the file cannot be repaired or 

quarantined. 
■■ Exclude at-risk files 

Excludes the files at risk from future scans. If you 

exclude a file, you are doing so permanently from 

future scans. The threat may still be on your 

computer. 

Viruses can be found during a manual or scheduled scan 
or by Auto-Protect when you perform an action with an 
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infected file. Threats and security risks can appear 
during an instant messenger session, when sending an 
email message, or during a manual or scheduled scan. 

If a virus is found during a scan 

If Norton Antivirus finds a virus, Trojan horse, worm, or 
security risk during a scan or from an instant messenger 
session, you either receive a summary of the automatic 
repair or deletion results, or use the Repair Wizard to 
resolve the problem. 

Review the repair details 

If you have set your manual scan options so that Norton 
Antivirus repairs or deletes files automatically, and all 
infected files could be repaired or deleted, the scan 
summary lists the number of files found, infected, and 
repaired or deleted. This information is presented for 
status purposes only; you don't need to take further 
action to protect your computer. If you want to know 
more, you can check the repair details to see which files 
were infected and with which threats. 

To review the repair details 

1 In the scanner window, in the Summary pane, click 
More Details. 

2 When you are done reviewing the results, click 
Finished. 

Use the Repair Wizard 

If there are files that could not be fixed, or if you have set 
options so that Norton Antivirus asks you what to do 
when a virus or threat is found, the Repair Wizard opens. 
If Norton Antivirus did not attempt a repair, the Repair 
Wizard opens in the Fix Infection pane. Otherwise, it 
opens in the Quarantine window. 
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To use the Repair Wizard 

1 If the Repair Wizard opens in the Fix Infections pane, 
uncheck any files that you don't want Norton 
Antivirus to fix. 

All files are checked by default. This is the 
recommended action. 

2 Click Fix. 

If any files cannot be fixed or deleted, the Quarantine 
Infections window opens. All files are checked to be 
added to Quarantine by default. This is the 
recommended action. 

3 In the Quarantine window, uncheck any files that you 
do not want to quarantine. 

4 Click Quarantine. 

If any files could not be quarantined, the Delete 
window opens. All files are checked to be deleted by 
default. 

5 In the Delete window, uncheck any files that you do 
not want to delete. 

If you do not delete the infected files, the virus or file 
at risk remains on your computer and can cause 
damage or be transmitted to others. 

6 Click Delete. 

If any files could not be deleted, the Exclude At-risk 
Files window opens to allow you to exclude files 
considered to be at risk from future scans. 

7 In the Exclude At-risk Files window, select any files 
that you want to exclude. 

8 Click Exclude. 

9 Once all of the files have been repaired, quarantined, 
deleted, or excluded, the Scan Summary window 
opens. 

If any files could not be deleted, they appear in the 
Scan Summary window with a status of at risk or 
delete failed. There are a variety of reasons why some 
files cannot be deleted: a file could be in use or part of 
a larger program. Norton Antivirus recommends that 
you select the threat name to review the information 
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from the Internet and determine the appropriate 
action. 

10 When you are done reviewing the summary, click 
Finished. 

found by Auto- Protect 

Auto-Protect scans files for viruses when you perform an 
action with them, such as moving them, copying them, or 
opening them. If it detects a virus or virus-like activity, in 
most cases you receive an alert telling you that a virus 
was found and repaired. How you proceed depends on 
the operating system that you are using. 

If you are using Windows 98/98SE/Me 

If a virus or threat is found and repaired by Auto-Protect 
in Windows 98/98SE/Me, you receive an alert telling you 
which file was repaired or deleted. 

To close the alert 
❖ Click Finish. 

If you have set your options so that Auto-Protect asks you 
what to do when it finds a virus, the alert asks you to 
choose one of the following actions. The recommended 
action is always preselected. 



Action 


Result 


Repair the 
infected file 


Automatically eliminates the virus, Trojan horse, or 
worm and repairs or deletes the infected file. When a 
virus is found, Repair is always the best choice. 


Quarantine the 
infected file 


Isolates the infected file, but does not remove the 
threat. Select Quarantine if you suspect that the 
infection is caused by an unknown threat and you want 
to submit the threat to Symantec for analysis. 



If a virus is 

See "Ensure that 
protection settings 
are enabled" on 
page 75- 
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Action 


Result 


Delete the infected 
file 


Erases both the threat and the infected file. Select Delete 
if Repair is not successful. Replace the deleted file with 
the original program file or backup copy. If the virus, 
Trojan horse, or worm is detected again, your original 
copy is infected. 


Do not open the 
file, but leave the 
problem alone 


Stops the current operation to prevent you from using an 
infected file. This action does not solve the problem. You 
will receive an alert the next time that you perform the 
same activity. 


Ignore the 
problem and do 
not scan this file 
in the future 


Adds the file that is suspected of containing a threat to 
the Exclusions list. When you add a file to the Exclusions 
list, the file is excluded from any future virus scans, 
unless you remove it from the list. Select this option only 
if you know that the file does not contain a virus. 


Ignore the 
problem and 
continue with the 
infected file 


Continues the current operation. Select this option only 
if you are sure that a virus, Trojan horse, or worm is not 
at work. You will receive an alert again. If you are not 
sure what to do, select Do not open the file, but leave 
the problem alone. 



If a file cannot be repaired, you receive an alert telling 
you that the repair was not made and recommending that 
you quarantine the file. You have the same options as 
those listed in the table, with the exception of Repair the 
infected file. 



If you are using Windows 2000/XP 

If a virus is found and either repaired or automatically 
deleted by Auto-Protect in Windows 2000/XP, you 
receive an alert telling you which file was repaired or 
deleted and which virus, Trojan horse, or worm was 
infecting the file. If you have an active Internet 
connection, selecting the virus name opens the Symantec 
Web page that describes the virus. 



To close the alert 

❖ Click OK. 
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If the file cannot be repaired, you receive two alerts, one 
telling you that Auto-Protect was unable to repair the file, 
and another telling you that access to the file was denied. 

See "If Norton You can set your Auto-Protect options to try to 

Antivirus places quarantine any infected files that it cannot repair. If you 

!|' es in .. „ do this, you are informed if any files are quarantined. 

Quarantine on ' ' M 

page 92 ' To resolve problems with unrepaired files 

1 Run a full system scan on your computer to ensure 
that no other files are infected. 

See "If a virus is 2 Follow the recommended actions in the Repair Wizard 
found during a ( 0 protect your computer from the infected files, 

scan" on page 86. 



is found by Worm Blocking 

If a program tries to email itself or email a copy of itself, 
it could be a worm trying to spread via email. A worm can 
send itself or a copy of itself in an email message without 
any interaction with you. 

Worm Blocking continually scans outgoing email 
attachments for worms. If it detects a worm, you receive 
an alert telling you that a malicious worm was found. 

The alert presents you with options and asks you what to 
do. If you were not sending an email message at that 
time, then it is probably a worm and you should 
quarantine the file. You can click Help on the alert for 
additional information about how to respond. 

After you have responded to the threat and deleted the 
file, you could still have an infected system. Follow these 
procedures. 



Procedure 


For more information 


Run LiveUpdate to ensure that you 
have the latest protection updates. 


See "About protection updates" on 
page 68. 


Scan your system. 


See "Perform a full system scan" on 
page 77. 



If a threat 

See "Ensure that 
protection settings 
are enabled" on 
page 75- 
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Procedure 


For more information 


Go to the Symantec Security 
Response Web page for the most 
up-to-date virus definitions and 
clean-up tools. 


See the Symantec Security Response Web 
page at securityresponse.symantec.com 



If Inoculation alerts you about a change in 
system files 



(D 



See "Ensure that 
protection settings 
are enabled" on 
page 75- 



Inoculation protection is available on Windows 98/98SE/ 
Me systems only. 

System files can change for a variety of reasons. You may 
have updated your operating system or repartitioned 
your hard disk, or you could have a vims. Norton 
Antivirus alerts you when a change occurs in your 
system files. 

If you get an alert about a change in your system files, 
you have two options. You can update your Inoculation 
snapshot or repair the file. Before you repair the file, be 
sure that your virus definitions are up-to-date and run a 
scan. 

To respond to Inoculation changes 

❖ In the Alert window, select the action that you want to 
take. Your options are: 



Update the saved 


Use if the alert appears after a 


copy of my Master 


legitimate change in system files. 


Boot Record 




Restore my Master 


Use if you are certain the system 


Boot Record 


did not change for legitimate 




reasons. 



92 I What to do if a virus is found 

If Norton Antivirus places files in Quarantine 



If Norton Antivirus places files in 
Quarantine 

Once a file has been placed in Quarantine, you have 
several options. All of the actions that you take on files in 
Quarantine must be performed in the Quarantine 
window. 

The toolbar at the top of the Quarantine window contains 
all of the actions that you can perform on quarantined 
files. 



Add Item 


Adds files to Quarantine. Use this action to quarantine a 
file that you suspect is infected. This action has no effect 
on files that are already in Quarantine. 


Properties 


Provides detailed information about the selected file and 
the virus that is infecting it. 


Repair Item 


Attempts to repair the selected file. Use this action if you 
have received new virus definitions since the file was 
added to Quarantine. 


Restore Item 


Returns the selected file to its original location without 
repairing it. 


Delete Item 


Deletes the selected file from your computer. 


Submit Item 


Sends the selected file to Symantec. Use this option if 
you suspect that a file is infected even if Norton Antivirus 
did not detect it. 


LiveUpdate 


Runs LiveUpdate to check for new protection and 
program updates. Use this if you haven't updated your 
virus definitions for a while and then try to repair the 
files in Quarantine. 



To open the Quarantine window 

1 On the left side of the main window, under Norton 
Antivirus, click Reports. 

2 in the Reports pane, on the Quarantined items line, 
click View Report. 
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To perform an action on a file in Quarantine 

1 In the Quarantine window, select the file on which 
you want to perform the action. 

2 On the toolbar, select the action that you want to 
perform. 

3 When you are finished, on the File menu, click Exit. 



Antivirus cannot repair a file 

One of the most common reasons that Norton Antivirus 
cannot automatically repair or delete an infected file is 
that you do not have the most up-to-date virus 
definitions. Update your virus definitions with 
LiveUpdate and scan again. 

If that does not work, read the information in the report 
window to identify the types of items that cannot be 
repaired, and then take one of the following actions, 
depending on the file type. 



File type 


Action 


Infected files with .exe, .doc, .dot, 
or .xls file name extensions (any 
file can be infected) 


Use the Repair Wizard to solve the 
problem. 

For more information, see the online 
Help. 


Hard disk master boot record, boot 
record, or system files (such as 
10. SYS or MSDOS.SYS) and floppy disk 
boot record and system files 


Replace using the Rescue Disks or your 

operating system disks. 

For more information, see the online 

Help. 



If Norton 

See "Keeping 
current with 
LiveUpdate" on 
page 67. 
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Look up viruses on the Symantec Web 
site 

The Symantec Web site contains a complete list of all 
known viruses and related malicious code, along with 
descriptions. You must be connected to the Internet to 
look up viruses. 

To look up viruses 

1 On the left side of the main window, under Norton 
Antivirus, click Reports. 

2 In the Reports pane, on the Online Virus Encyclopedia 
line, click View Report. 

The Symantec Web site opens in your Internet 
browser. 

3 Use the links on the Web page to access the virus 
information for which you are looking. 



Troubleshooting 



The information in this chapter will help you solve the 
most frequently encountered problems. If you can't find 
the solution to your problem here, there is a wealth of 
information on the Symantec Web site. 

Explore the Symantec service and 
support Web site 

On the Symantec service and support Web site, you can 
find the latest protection and program updates, patches, 
online tutorials, Knowledge Base articles, and virus 
removal tools. 

To explore the Symantec service and support Web site 

1 On the Internet, go to www.symantec.com/techsupp 

2 On the service and support Web page, under the 
heading home & home office/small business, click 
Continue. 

3 On the home & home office/small business page, click 
start online support. 

if Follow the links to the information that you want. 

If you cannot find what you are looking for using the 
links on the introduction page, try searching the Web 
site. 
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To search the Symantec service and support Web site 

1 On the left side of any Symantec Web site page, click 
search. 

2 On the search page, type a word or phrase that best 
represents the information for which you are looking. 
Use the following guidelines when searching the 
Symantec Web site: 

•s Type a single word in lowercase letters to find all 
occurrences of the word, including partial 
matches. For example, type install to find articles 
that include the word install, installation, 
installing, and so on. 

■s Type multiple words to find all occurrences of any 
of the words. For example, type virus definitions to 
find articles that include virus or definitions or 
both. 

■s Type a phrase enclosed in quotation marks to find 
articles that include this exact phrase. 

■s Type a plus (+) sign in front of all of the search 
terms to retrieve documents containing all of the 
words. For example, +lnternet +Security finds 
articles containing both words. 

■s For an exact match, type the search words in 
uppercase letters. 

■s To search for multiple phrases, enclose each 
phrase in quotation marks and use commas to 
separate the phrases. For example, "purchase 
product", "MAC", "Norton SystemWorks" searches 
for all three phrases, and finds all articles that 
include any of these phrases. 

3 Select the area of the Web site that you want to 
search. 

4 Click Search. 
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Troubleshoot Norton Antivirus 

Check here for possible solutions to issues that might 
arise with Norton Antivirus. 

Auto-Protect does not load when I start 
my computer 

If the Norton Antivirus Auto-Protect icon does not appear 
in the lower-right corner of the Windows taskbar, Auto- 
Protect is not loaded. There are three likely reasons that 
this is happening. 

You may have started Windows in safe mode. Windows 
restarts in safe mode if the previous shutdown did not 
complete successfully. For example, you may have 
turned off the power without choosing Shut Down on the 
Windows Start menu. 

To restart Windows 

1 On the Windows taskbar, click Start > Shut Down. 

2 In the Shut Down Windows dialog box, click Restart. 

3 Click OK. 

Norton Antivirus may not be configured to start Auto- 
Protect automatically. 

To set Auto-Protect to start automatically 

1 In the main window, click Options. 

If a menu appears, click Norton Antivirus. 

2 In the Options window, under System, click Auto- 
Protect. 

3 Ensure that Start Auto-Protect when Windows starts 
up is checked. 

Norton Antivirus may not be configured to show the 
Auto-Protect icon in the tray. 
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To show the Auto-Protect icon in the tray 

1 In the main window, click Options. 

If a menu appears, click Norton Antivirus. 

2 In the Options window, under System, click Auto- 
Protect. 

3 Ensure that Show the Auto-Protect icon in the tray is 
checked. 

I have scanned and removed a virus, but it keeps 
infecting my files 

There are four possible reasons a virus could be 
reappearing. 

The virus might be in a program file with an unusual 
extension for which Norton Antivirus is not configured 
to look. 

To reset Norton Antivirus scanning options 

1 In the main window, click Options. 
If a menu appears, click Norton Antivirus. 

2 In the Options window, under System, click Manual 
Scan. 

3 Under Which file types to scan for viruses, click 
Comprehensive file scanning. 

it Click Manual Scan > Bloodhound. 

5 Ensure that Enable Bloodhound heuristics is checked, 
then click Highest level of protection. 

6 Click OK. 

7 Scan all of the disks that you use and repair all 
infected files. 

The source of the infection could also be a floppy disk. 
Scan all of the floppy disks that you use to ensure that 
they are free of viruses. 

Another reason could be that the virus is remaining in 
memory after you remove it from the boot record. It then 
reinfects your boot record. Use your Rescue Disks to 
remove the virus. 

If the problem is a Trojan horse or worm that was 
transmitted over a shared network drive, you must 



See "If you need to 
use Rescue Disks to 
restore your 
system" on 
page 51. 
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disconnect from the network or password protect the 
drive to let Norton Antivirus delete the problem. 

rus cannot repair my infected files 

The most common reason that Norton Antivirus cannot 
repair your infected files is that you do not have the most 
current virus protection on your computer. Update your 
virus definitions regularly to protect your computer from 
the latest viruses. 

If after using LiveUpdate the virus still cannot be 
repaired, the file may be corrupted, or contain a new 
virus. There are two additional options: 

ss Quarantine the file and submit it to Symantec, 
ss If you don't need the file or a non-infected copy of the 
file exists, delete the infected file and replace it with 
the non-infected file. 

I can't receive email messages 

There are several possible solutions to this problem. 

If you are using a firewall, it may block access to the 
Internet features of Norton Antivirus. 

Temporarily disable email protection. This might allow 
the problem email messages to download so that you can 
once again enable email protection. You are protected by 
Auto-Protect while email protection is disabled. 

To temporarily disable incoming email protection 

1 In the main window, click Options. 
If a menu appears, click Norton Antivirus. 

2 In the Options window, under Internet, click Email. 

3 Uncheck Scan incoming Email. 
h Click OK. 

5 Download your email messages. 

6 Reenable incoming email protection. 

Your email client may have timed out. Make sure that 
timeout protection is enabled. 



Norton AntiVi 

See "Keeping 
current with 
tivellpdate" on 
page 67. 



See "If Norton 
Antivirus places 
files in 

Quarantine" on 
page 92. 



See "About System 
options" on 
page 61. 
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If you continue to experience problems downloading 
email messages, disable email protection. 

To disable email protection 

1 In the main window, click Options. 

If a menu appears, click Norton Antivirus. 

2 In the Options window, under Internet, click Email. 

3 Uncheck Scan incoming Email. 
it Uncheck Scan outgoing Email. 
5 Click OK. 

I can't send email messages 

If you get the message Norton Antivirus was unable to 
send your email message because the connection to your 
email server was disconnected, your email client may be 
set to automatically disconnect after sending and 
receiving mail. 

If you are using a firewall, it may block access to the 
Internet features of Norton Antivirus. 

For Norton Antivirus to scan outgoing email messages 
for viruses, it intercepts and scans the messages before 
they are sent to your email provider. To resolve this 
issue, turn off this option within your email client. 
Consult your email client manual for instructions on how 
to do this, or disable Norton Antivirus outgoing email 
scanning. 

To disable outgoing email scanning 

1 In the main window, click Options. 
If a menu appears, click Norton Antivirus. 

2 In the Options window, under Internet, click Email. 

3 Uncheck Scan outgoing Email. 
it Click OK. 
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Troubleshoot Rescue Disks 



Check here for possible solutions to issues that might 
arise with Rescue Disks. 



My Rescue Disk does not work 

See "Create and Due to the number of product-specific technologies used 



use Rescue Disks" 
on page «• 



by manufacturers to configure and initialize hard drives, 
the Rescue program cannot always create a bootable disk 
automatically. If your Rescue Boot Disk does not work 
properly, do one of the following: 

11 Be sure you have downloaded the latest Rescue Disk 
update from LiveUpdate. 

ss If you have a special startup disk for your computer, 
add it to your Rescue Disk set. In an emergency, start 
from that disk. Remove the disk and insert your 
Rescue Boot Disk. At the DOS prompt, type 
A:RSHELL, press Enter, then follow the on-screen 
instructions. 

ss Use the Disk Manager or similarly named program 
that came with your computer to make your Rescue 
Boot Disk bootable. Make sure to test your modified 
Rescue Boot Disk. 

Sometimes, your Rescue Boot Disk does not work 
properly because you have more than one operating 
system installed, such as Windows 2000 and Windows 
98. 

To modify your Rescue Boot Disk 

1 Start up from your hard drive. 

2 Insert your Rescue Boot Disk into drive A. 

3 At the DOS prompt, type SYS A: 

4 Press Enter. 

This transfers the operating system to the Rescue 
Boot Disk. Be sure to retest your Rescue Disks. 
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I cannot start from drive A 

See "Create and If your computer does not check drive A first on startup, 
use Rescue Disks" use vour computer's Setup program to change settings, 
on page w, 

Be careful when making changes using your computer's 
Setup program. If you have never used it before, you may 
want to refer to your computer manufacturer's 
documentation. 

To change your computer's settings 

1 Restart your computer. 

A message appears telling you the key or keys to 
press to run SETUP, such as Press <DEL> if you want 
to run SETUP. 

2 Press the key or keys to launch the Setup program. 

3 Set the Boot Sequence to boot drive A first and drive C 
second. 

Setup programs vary from one manufacturer to the 
next. If you cannot find the Boot Sequence option, use 
the Setup program's Help system, refer to the 
documentation that came with your system, or 
contact your system's manufacturer. 
h Save the changes, then exit the Setup program. 

You may need to use a special boot disk rather than the 
Rescue Boot Disk. In this case, use the boot disk or 
startup disk that came with your computer. 

See "My Rescue If your computer is set up with more than one operating 
Disk does not system, such as Windows 2000 and Windows 98, you 

work" on page 101. may need tQ modify the Rescue Boo t Disk. 
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I get an error when testing basic Rescue Disks 

See "Create and If you get the message Non-system disk, replace the disk 
use Rescue Disks" anc [ p reS s any key when testing your Rescue Disks, the 
on page «• Rescue program may not have prepared the floppy boot 

files correctly. 

To repair the Rescue Boot Disk without having to 
reformat the disk and create a new Rescue Disk set 

1 Remove the Rescue Boot Disk and restart your 
computer. 

2 Insert the Rescue Boot Disk into the floppy disk drive. 

3 On the Windows taskbar, click Start > Run. 
k In the Run dialog box, type SYS A: 

5 Click OK. 
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Service and support 
solutions 



The Service & Support Web site at 
http://service.symantec.com supports Symantec 
products. Customer Service helps with nontechnical 
issues such as orders, upgrades, replacements, and 
rebates. Technical Support helps with technical issues 
such as installing, configuring, or troubleshooting 
Symantec products. 

Methods of technical support and customer service can 
vary by region. For information on support offerings in 
your region, check the appropriate Web site listed in the 
sections that follow. 

If you received this product when you purchased your 
computer, your computer manufacturer may be 
responsible for providing your support. 

Customer service 

The Service & Support Web site at 
http://service.symantec.com tells you how to: 

ss Subscribe to Symantec newsletters. 

!! Locate resellers and consultants in your area. 

ss Replace defective CD-ROMs and manuals. 

ss Update your product registration. 

ss Find out about orders, returns, or a rebate status. 

ss Access Customer Service FAQs. 

ss Post a question to a Customer Service representative. 

ss Obtain product information, literature, or trialware. 
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For upgrade orders, visit the Symantec Store at: 
http://www.symantecstore.com 

Technical support 

Symantec offers two technical support options for help 
with installing, configuring, or troubleshooting Symantec 
products: 

!! Online Service and Support 

Connect to the Symantec Service & Support Web site 
at http://service.symantec.com, select your user type, 
and then select your product and version. You can 
access hot topics, Knowledge Base articles, tutorials, 
contact options, and more. You can also post a 
question to an online Technical Support 
representative. 

■■ PriorityCare telephone support 

This fee-based (in most areas) telephone support is 
available to all registered customers. Find the phone 
number for your product at the Service & Support 
Web site. You'll be led through the online options 
first, and then to the telephone contact options. 

Support for old and discontinued versions 

When Symantec announces that a product will no longer 
be marketed or sold, telephone support is discontinued 
60 days later. Technical information may still be 
available through the Service & Support Web site at: 
http://service.symantec.com 
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Subscription policy 

If your Symantec product includes virus, firewall, or Web 
content protection, you may be entitled to receive 
updates via LiveUpdate. Subscription length varies by 
Symantec product. 

After your initial subscription ends, you must renew it 
before you can update your virus, firewall, or Web 
content protection. Without these updates, you will be 
vulnerable to attacks. 

When you run LiveUpdate near the end of your 
subscription period, you are prompted to subscribe for a 
nominal charge. Simply follow the instructions on the 
screen. 

Worldwide service and support 

Technical support and customer service solutions vary 
by country. For Symantec and International Partner 
locations outside of the United States, contact one of the 
service and support offices listed below, or connect to 
http://service.symantec.com and select your region 
under Global Service and Support. 
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Service and support offices 



North America 



Symantec Corporation http://www.symantec.com/ 
555 International Way 
Springfield, OR 97W7 
U.S.A. 



Australia and New Zealand 

Symantec Australia http://www.symantec.com/region/reg_ap/ 

Level 2, l Julius Avenue +61 (2) 8879-1000 

North Ryde, NSW 2113 Fax: +61 (2) 8879-1001 

Sydney 

Australia 

Europe, Middle East, and Africa 



Symantec Authorized Service Center 
Postbus 1029 
3600 BA Maarssen 
The Netherlands 



http://www.symantec.com/region/reg_eu/ 
+353 (1) 811 8032 



Latin America 



Symantec Brasil Portuguese: 

Market Place Tower http://www.service.symantec.com/br 

Av. Dr. Chucri Zaidan, 920 Spanish: 

12 0 andar http://www.service.symantec.com/mx 

Sao Paulo - SP Brazil: +55 (11) 5189-6300 

CEP: 04583-904 Mexico: +52 55 5322 3681 (Mexico DF) 

Brasil, SA 01 800 711 814.43 (Interior) 

Argentina: +54 (11) 5382-3802 
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access privileges 


The types of operations that a user can perform on a 
system resource. For example, a user can have the 
ability to access a certain directory and open, modify, 
or delete its contents. 


ActiveSync 


The synchronization software for Microsoft Windows- 
based Pocket PCs. 


ActiveX 


A method of embedding interactive programs into 
Web pages. The programs, which are called controls, 
run when you view the page. 


alert 


A message that appears to signal that an error has 
occurred or that there is a task that requires 
immediate attention, such as a system crash or a 
Virus Alert. 


alias 


A shortcut icon that points to an original object such 
as a file, folder, or disk. 


AppleTalk 


A protocol that is used by some network devices such 
as printers and servers to communicate. 


attack signature 


A data pattern that is characteristic of an Internet 
attack. Intrusion Detection uses attack signatures to 
distinguish attacks from legitimate traffic. 


beam 


To transfer certain programs and data between two 
handheld devices using built-in infrared technology. 
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boot record 


A sector at the start of a disk that describes the disk 
(sector size, cluster size, and so on). On startup disks, 
the boot record also has a program that loads the 
operating system. 


bootable disk 


A disk that can be used to start a computer. 


cache 


A location on your disk in which data is stored for 
reuse. A Web browser cache stores Web pages and 
files (such as graphics) as you view them. 


cache file 


A file that is used to improve the performance of 
Windows. 


compressed file 


A file whose content has been made smaller so that 
the resulting data occupies less physical space on the 
disk. 


connection-based 
protocol 


A protocol that requires a connection before 
information packets are transmitted. 


connectionless 
protocol 


A protocol that sends a transmission to a destination 
address on a network without establishing a 
connection. 


cookie 


A file that some Web servers put on your disk when 
you view pages from those servers. Cookies store 
preferences, create online shopping carts, and 
identify repeat visitors. 


denial-of-service 
attack 


A user or program that takes up all of the system 
resources by launching a multitude of requests, 
leaving no resources, and thereby denying service to 
other users. 


DHCP (Dynamic Host 

Configuration 

Protocol) 


A TCP/IP protocol that assigns a temporary IP 
address to each device on a network. DSL and cable 
routers use DHCP to allow multiple computers to 
share a single Internet connection. 


dial-up 


A connection in which a computer calls a server and 
operates as a local workstation on the network. 
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DNS (Domain Name 
System) 


The naming system used on the Internet. DNS 
translates domain names (such as 
www.symantec.com) into IP addresses that 
computers understand (such as 206.204.212.71). 


DNS server (Domain 
Name System 
server) 


A computer that maps domain names to IP addresses. 
When you visit www.symantec.com, your computer 
contacts a DNS server that translates the domain 
name into an IP address (206.204.212.71). 


domain 


The common Internet address for a single company or 
organization (such as symantec.com). See also host 
name. 


DOS window 


A method of accessing the MS-DOS operating system 
to execute DOS programs through the Windows 
graphical environment. 


download 


To transfer a copy of a file or program from the 
Internet, a server, or computer system to another 
server or computer. 


driver 


Software instructions for interpreting commands for 
transfer to and from peripheral devices and a 
computer. 


encryption 


Encoding data in such a way that only a person with 
the correct password or cryptographic key can read it. 
This prevents unauthorized users from viewing or 
tampering with the data. 


Ethernet 


A common method of networking computers in a LAN 
(local area network). Ethernet cables, which look like 
oversized phone cables, carry data at 10M bps or 
100M bps. 


executable file 


A file containing program code that can be run. 
Generally includes any file that is a program, 
extension, or system files whose names end with .bat, 
.exe, or .com. 
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extension 


The three-letter ending on a file name that associates 
the file with an activity or program. Examples include 
.txt (text) and .exe (executable program). 


FAT (file allocation 
table) 


A system table (used primarily by DOS and Windows 
9x/Me) that organizes the exact location of the files 
on the hard drive. 


file type 


A code that associates the file with a program or 
activity, often appearing as the file name extension, 
such as .txt or jpeg. 


Finder 


The program that manages your Macintosh disk and 
file activity and display. 


firewall rule 


Parameters that define how a firewall reacts to 
specific data or network communications. A firewall 
rule usually contains a data pattern and an action to 
take if the pattern is found. 


fragmented 


When the data that makes up a file is stored in 
noncontiguous clusters across a disk. A fragmented 
file takes longer to read from the disk than an 
unfragmented file. 


fragmented IP 
packet 


An IP packet that has been split into parts. Packets 
are fragmented if they exceed a network's maximum 
packet size, but malicious users also fragment them 
to hide Internet attacks. 


FTP (File Transfer 
Protocol) 


An application protocol used for transferring files 
between computers over TCP/IP networks such as 
the Internet. 


hidden attribute 


A file attribute that makes files harder to access and 
more difficult to delete than other files. It also 
prevents them from appearing in a DOS or Windows 
directory list. 


host name 


The name by which most users refer to a Web site. For 
example, www.symantec.com is the host name for the 
Symantec Web site. Host names are translated to IP 
addresses by the DNS. 
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HotSync 


The synchronization software for Palm OS handheld 
devices. 


HTML (Hypertext 
Markup Language) 


The language used to create Web pages. 


ICMP (Internet 
Control Message 
Protocol) 


An extension to the basic Internet Protocol (IP) that 
provides feedback about network problems. 


IGMP (Internet 
Group Management 
Protocol) 


An extension to the basic Internet Protocol (IP) that is 
used to broadcast multimedia over the Internet. 


IMAPit (Internet 
Message Access 
Protocol version i») 


One of the two most popular protocols for receiving 
email. IMAP makes messages available to read and 
manage without downloading them to your computer. 


infrared (IR) port 


A communication port on a handheld device for 
interfacing with an infrared-capable device. Infrared 
ports do not use cables. 


IP (Internet 
Protocol) 


The protocol that underlies most Internet traffic. IP 
determines how data flows from one computer to 
another. Computers on the Internet have IP addresses 
that uniquely identify them. 


IP address (Internet 
Protocol address) 


A numeric identifier that uniquely identifies a 
computer on the Internet. IP addresses are usually 
shown as four groups of numbers separated by 
periods. For example, 206.204.52.71. 


ISP (Internet service 
provider) 


A company that supplies Internet access to 
individuals and companies. Most ISPs offer additional 
Internet connectivity services, such as Web site 
hosting. 


Java 


A programming language used to create small 
programs called applets. Java applets can be used to 
create interactive content on Web pages. 
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JavaScript 


A scripting language used to enhance Web pages. 
Most sites use JavaScript to add simple interactivity 
to pages, but some use it to open pop-up ads and reset 
visitors' homepages. 


macro 


A simple software program that can be started by a 
specific keystroke or a series of keystrokes. Macros 
can be used to automate repetitive tasks. 


NAT (network 
address translation) 


A method of mapping private IP addresses to a single 
public IP address. NAT allows multiple computers to 
share a single public IP address. Most DSL and cable 
routers support NAT. 


network address 


The portion of an IP address that is shared by all 
computers on a network or subnet. For example, 
10.0.1.1 and 10.0.1.8 are part of the network address 
10.0.1.0. 


NTFS (NTFS file 
system) 


A system table (used primarily by Windows 2000/ 
XP) that organizes the exact location of all the files on 
the hard drive. 


packet 


The basic unit of data on the Internet. Along with the 
data, each packet includes a header that describes the 
packet's destination and how the data should be 
processed. 


partition 


A portion of a disk that is prepared and set aside by a 
special disk utility to function as a separate disk. 


POP3 (Post Office 
Protocol version 3) 


One of the two most popular protocols for receiving 
email. POP3 requires that you download messages to 
read them. 


port 


A connection between two computers. TCP/IP and 
UDP use ports to indicate the type of server program 
that should handle a connection. Each port is 
identified by a number. 
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port number 


A number used to identify a particular Internet 
service. Internet packets include the port number to 
help recipient computers decide which program 
should handle the data. 


PPP(Point-to-Point 
Protocol) 


A protocol for communication between two 
computers using a dial-up connection. PPP provides 
error-checking features. 


protocol 


A set of rules governing the communication and 
transfer of data between computers. Examples of 
protocols include HTTP and FTP. 


proxy 


A computer or program that redirects incoming and 
outgoing traffic between computers or networks. 
Proxies are often used to protect computers and 
networks from outside threats. 


registry 


A category of data stored in the Windows registry that 
describes user preferences, hardware settings, and 
other configuration information. Registry data is 
accessed using registry keys. 


removable media 


Disks that can be removed, as opposed to those that 
cannot. Some examples of removable media are 
floppy disks, CDs, DVDs, and Zip disks. 


router 


A device that forwards information between 
computers and networks. Routers are used to manage 
the paths that data takes over a network. Many cable 
and DSL modems include routers. 


script 


A program, written in a scripting language such as 
VBScript or JavaScript, that consists of a set of 
instructions that can run without user interaction. 


service 


General term for the process of offering information 
access to other computers. Common services include 
Web service and FTP service. Computers offering 
services are called servers. 
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SSL (Secure Sockets 
Layer) 


A protocol for secure online communication. 
Messages sent using SSL are encrypted to prevent 
unauthorized viewing. SSL is often used to protect 
financial information. 


subnet 


A local area network that is part of a larger intranet or 
the Internet. 


subnet mask 


A code, in the form of an IP address, that computers 
use to determine which part of an IP address 
identifies the subnet and which part identifies an 
individual computer on that subnet. 


synchronize 


The process by which a handheld device and 
computer compare files to ensure that they contain 
the same data. 


TCP/IP 

(Transmission 
Control Protocol/ 
Internet Protocol) 


Standard protocols used for most Internet 
communication. TCP establishes connections 
between computers and verifies that data is properly 
received. IP determines how the data is routed. 


threat 


A program with the potential to cause damage to a 
computer by destruction, disclosure, modification of 
data, or denial of service. 


Trojan horse 


A program containing malicious code that is 
disguised as or hiding in something benign, such as a 
game or utility. 


UDP (User Datagram 
Protocol) 


A protocol commonly used for streaming media. 
Unlike TCP, UDP does not establish a connection 
before sending data and it does not verify that the 
data is properly received. 


virus definition 


Virus information that an antivirus program uses to 
identify and alert you to the presence of a specific 
virus. 
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specification. 


worm 


A program that replicates without infecting other 




programs. Some worms spread by copying 




themselves from disk to disk, while others replicate 




only in memory to slow a computer down. 
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